4a89d7f49e55b43790e9dfc0ed3144f57b4c6f602a385800f6a8a16811471bbc5c13a46a1d4f6d2a6094b7786a845162b9ba66fac64863e1fb839e67ade3"}) (async, rerun: 32) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, r0, 0x20ffe000) (rerun: 32) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000001c0)={0x1800000, 0x10, "bc61f8f948ae532ac52c90befe125ca9"}) 23:38:16 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x20ffe000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:16 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7ffffffffffffffd, 0x40aa01) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket(0x21, 0x3, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, r4, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x16}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18b}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xcbd}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffb}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x20}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000814}, 0x800) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000280)="d4565008d4deb0e866c088fc8edc1e571c8302cfdd24f97460080e9c924149750b50cfceeda9d510de8f384e3012004365ce0db44eb6dd92c5c58415311947313684c717b3603ce18cb5fa5f5613bc632d0f6d685648e8562443e94a1397fecaac425e20fd6bd37ee99a0aa6897dfeb9bd82834c31b08c1b0a94443c335a2fdd0a34e24e955445bbe332ac9ddd8625f0ee60f752f9805cfe03bfb6f2880669511ac3f1b6b170a7f9dbcfaffd5cc4aeebafe160f315b8858f3a3032faac43db136afbe1eeed5df755307e36e478a743c2e22a26e12265", 0xd6, r6}, 0x68) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 23:38:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0x80, 0xec, "25741238b7ec14688439f350e1a3f6c6af69d9098248b8a5ebc69dcdd82fbadcf36b02426cbe37e65f0fe9450c7c0a46aa7c570b1781dcb200082fff0eeb096bbe6b3f585136d790d203652c9b0c174748acaa09229b977fe0358360c869dc441f23f26598e873c2dd32e77ecd04f1ef5fbb5d1cca9042c2c617ace712d15c9f301c47bc5e8dd230d96ec74a6f94c234211ceb9d36f05bcc2349052f3a19e4dbc403c512c6edd466a88daaf7a9054a89d7f49e55b43790e9dfc0ed3144f57b4c6f602a385800f6a8a16811471bbc5c13a46a1d4f6d2a6094b7786a845162b9ba66fac64863e1fb839e67ade3"}) (async) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0x80, 0xec, "25741238b7ec14688439f350e1a3f6c6af69d9098248b8a5ebc69dcdd82fbadcf36b02426cbe37e65f0fe9450c7c0a46aa7c570b1781dcb200082fff0eeb096bbe6b3f585136d790d203652c9b0c174748acaa09229b977fe0358360c869dc441f23f26598e873c2dd32e77ecd04f1ef5fbb5d1cca9042c2c617ace712d15c9f301c47bc5e8dd230d96ec74a6f94c234211ceb9d36f05bcc2349052f3a19e4dbc403c512c6edd466a88daaf7a9054a89d7f49e55b43790e9dfc0ed3144f57b4c6f602a385800f6a8a16811471bbc5c13a46a1d4f6d2a6094b7786a845162b9ba66fac64863e1fb839e67ade3"}) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, r0, 0x20ffe000) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, r0, 0x20ffe000) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000001c0)={0x1800000, 0x10, "bc61f8f948ae532ac52c90befe125ca9"}) 23:38:16 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000000), 0x800) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) 23:38:16 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x8000000000000000) syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0x400001) 23:38:16 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x20ffe000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:16 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x30, r0, 0x6) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}}, 0x20000000) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) 23:38:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0x80, 0xec, "25741238b7ec14688439f350e1a3f6c6af69d9098248b8a5ebc69dcdd82fbadcf36b02426cbe37e65f0fe9450c7c0a46aa7c570b1781dcb200082fff0eeb096bbe6b3f585136d790d203652c9b0c174748acaa09229b977fe0358360c869dc441f23f26598e873c2dd32e77ecd04f1ef5fbb5d1cca9042c2c617ace712d15c9f301c47bc5e8dd230d96ec74a6f94c234211ceb9d36f05bcc2349052f3a19e4dbc403c512c6edd466a88daaf7a9054a89d7f49e55b43790e9dfc0ed3144f57b4c6f602a385800f6a8a16811471bbc5c13a46a1d4f6d2a6094b7786a845162b9ba66fac64863e1fb839e67ade3"}) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000002, 0x40010, r0, 0x20ffe000) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f00000001c0)={0x1800000, 0x10, "bc61f8f948ae532ac52c90befe125ca9"}) 23:38:16 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7ffffffffffffffd, 0x40aa01) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket(0x21, 0x3, 0x6) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, r4, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x16}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18b}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xcbd}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffb}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x20}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000814}, 0x800) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000280)="d4565008d4deb0e866c088fc8edc1e571c8302cfdd24f97460080e9c924149750b50cfceeda9d510de8f384e3012004365ce0db44eb6dd92c5c58415311947313684c717b3603ce18cb5fa5f5613bc632d0f6d685648e8562443e94a1397fecaac425e20fd6bd37ee99a0aa6897dfeb9bd82834c31b08c1b0a94443c335a2fdd0a34e24e955445bbe332ac9ddd8625f0ee60f752f9805cfe03bfb6f2880669511ac3f1b6b170a7f9dbcfaffd5cc4aeebafe160f315b8858f3a3032faac43db136afbe1eeed5df755307e36e478a743c2e22a26e12265", 0xd6, r6}, 0x68) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 23:38:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xbba, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x48) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c881}, 0x20040094) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) 23:38:16 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7ffffffffffffffd, 0x40aa01) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) r1 = socket(0x21, 0x3, 0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, r4, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7f, 0x16}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x18b}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xcbd}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffb}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x20}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000814}, 0x800) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000380)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000280)="d4565008d4deb0e866c088fc8edc1e571c8302cfdd24f97460080e9c924149750b50cfceeda9d510de8f384e3012004365ce0db44eb6dd92c5c58415311947313684c717b3603ce18cb5fa5f5613bc632d0f6d685648e8562443e94a1397fecaac425e20fd6bd37ee99a0aa6897dfeb9bd82834c31b08c1b0a94443c335a2fdd0a34e24e955445bbe332ac9ddd8625f0ee60f752f9805cfe03bfb6f2880669511ac3f1b6b170a7f9dbcfaffd5cc4aeebafe160f315b8858f3a3032faac43db136afbe1eeed5df755307e36e478a743c2e22a26e12265", 0xd6, r6}, 0x68) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 23:38:16 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:16 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x8000000000000000) syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0x400001) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0x400001) 23:38:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0xffff8000, 0x0, 0x12, r0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000080)={0x18, 0xd, 0x1, {{0x1, 0x1, 0x8}, 0x2}}, 0x18) 23:38:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xbba, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x48) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c881}, 0x20040094) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xbba, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x48) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c881}, 0x20040094) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) 23:38:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004810}, 0x40001) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x6, 0x2, 0x1, 0x1}, 0x8) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:16 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="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", 0xff, r0}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x10004804) 23:38:16 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:16 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="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", 0xff, r0}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x10004804) 23:38:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r0, 0x0) 23:38:16 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x8000000000000000) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0x400001) 23:38:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004810}, 0x40001) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x6, 0x2, 0x1, 0x1}, 0x8) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xbba, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x48) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c881}, 0x20040094) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) 23:38:16 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:16 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004810}, 0x40001) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x6, 0x2, 0x1, 0x1}, 0x8) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0358fd3d", @ANYRES16=r3, @ANYBLOB="01000000000000000000180000000a0006000802110000010000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x44040) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xc0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$MRT6(r4, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000080)=0x4) 23:38:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffd, 0x12, r0, 0x0) 23:38:16 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0x0) 23:38:16 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="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", 0xff, r0}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x10004804) 23:38:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x900, 0x12, r0, 0x0) 23:38:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0358fd3d", @ANYRES16=r3, @ANYBLOB="01000000000000000000180000000a0006000802110000010000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x44040) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xc0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$MRT6(r4, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0358fd3d", @ANYRES16=r3, @ANYBLOB="01000000000000000000180000000a0006000802110000010000"], 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x44040) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xc0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) getsockopt$MRT6(r4, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) 23:38:16 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0x20ffe000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:16 executing program 1: ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="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") r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x22c4c2) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r3, 0x9) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:16 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x401) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:16 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0x0) pipe2(&(0x7f0000000000), 0x4000) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0x0) (async) 23:38:16 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0x20ffe000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:16 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0x0) 23:38:16 executing program 1: ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="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") r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x22c4c2) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) (async) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r3, 0x9) (async, rerun: 64) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (rerun: 64) 23:38:16 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x401) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:16 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0x0) pipe2(&(0x7f0000000000), 0x4000) (async) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r1, 0x0) (async) 23:38:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0358fd3d", @ANYRES16=r3, @ANYBLOB="01000000000000000000180000000a0006000802110000010000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x44040) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xc0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xc0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$MRT6(r4, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000080)=0x4) 23:38:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0358fd3d", @ANYRES16=r3, @ANYBLOB="01000000000000000000180000000a0006000802110000010000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x44040) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240), 0xc0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$MRT6(r4, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000080)=0x4) 23:38:16 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r0, 0x20ffe000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:16 executing program 1: ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="4864fe89d525cfb101a97bd0098ab22d4dc0d374ad111827f5d44d9c96895bd57bb932a9da36460122855da5616891937efe44c00a48d86fa7016b2a8349c6890ee4f78c3bf137bd1bbaa13c6fb19bfe5b51fe4799d5f397985afbf198c05cb300c2596c61c2e54032abda24b366f039e876378c9d05b8fef1515ad188aac7974ecb18db9b9db140a1500e84a78841171ee1323c5bb24ad568c22a8b45b58cd42037a55f77442bd6ed5da362b519f23f96bf9e3dca603997c4f4f63a54bbc9834d1bfba1bda0834acdb3f912eadce9473ab4ca16c68c668181198df981f4d6b1a93b5e341e488030e9bd6ffeff15f020f503048c2f92156c45e5829583ae447088ebb533eb40c74f65a338e9bedf62edeaaaef00614846d40d509a40b819d1b046a32f8ff7d516a90e5db05f7293ebd14c303b0e50b483a77dd414a775caf3869d6f3939580dd6518324dc22838d90d42f0daa1460733d6befe45caafe321f9de58f4af7c29de82b104519e1ff548f6885c34ff93b437316a2bd37345bd2379a5a5680422b255b87d792a9731421204e14cc733a7a4b2b86e35dfc3144e883ccbedfefd6025bafa70cd364141ef8d50c57d2289eb5acf70d99f00726d7c5463fd0bc489e1cbbca4de502e5120b2e7578d581ea830db0e00548da8b338cff4a0192f65472016e280e8405a5e4c8147d6cf7fdb0ac9872b22792d024cfc5088cecf4aa3aa844e7847c3ff363ee60a4fbaf6aa761c51368cac5b016c40d52ba7a1f9be57323fe41d30592f9039d448133c286b7b5c2db69c750226daf683e99b99d40dc0271ccab29df8fd919e7addd3fea178648325698b75dbbdf5680f44abdd9382e96803a2f243e146bb56634b05f6c5db804f709dbc4de005de2af6a5a290b22b76c29308244959cff63999dec66b6999e178a8a0495028843bd2dbcdbaa2e330c59ae2cb2084740849a6be2dfe6de1ebc2789acf5f3470108c5fdd57aabd5ceb03e8a619aec2ab87415ba8dc8ff2fb50848e6a3d4babc9f3fd36dbdd3c5c343ee5d8521bff18255565f33bccd1669e2c433af244c4490d1ae91ea9955e99ea49d5d28f0c448a0853533dae9b74822ab93e704087d7e4870352eb8aa292849ca65481e6696b39879a929afe93b01b5d466fc39b064c3541f20f385911a33dcfee5ecd30b5b9ab10d926caf7d2ebaafa145683103e1186ec5126f9c95f14dc7d6ccb933731ee71d01f4c814605638a884272ef8c88004328eafab6d7f0660a60f8d47fccd2084d33bb0bc5542562c763c5ec5bdddb329c16ab0a7d86390720425d2d7709861561826656540ba4dafda3cdd20b921691df72c9d2f989e017ccc6e69b4e9279421038d1be9c45165e330981daa7acdd5b18fe8f0a9708cc4635985354a740bff5c914e49b2e78edd22da90b628d8d04d46d4e05287a31b3f9ad448d29a360bd3f4516436c3b0e26f614071cd3b13d4e8d1e2918c5b0ba02ff618def43104c0d3cb634b564839e61fa1fdcbb4e956ce479cfb7304ddb5ae343c93ac28d8fda7d973475ac405bb9a0f872adaae928545be832c82326232b8091bae59dcedac18875d57612900cf4091a1b86e3791cc9c3de39733c6011acfdb76d38ef74b2d3a9b86972c924cf0efb3c9e75ec45022659570a741eb19fbeefcf46d523ecf92680693b89b839754b6a27b898a6d052e084fbf11f87de65a8a7827e708d35e5be946a83263e2036449fd6dda847260bec5ec7322606fca531f7b7006e80547dbfc126b4d8f4b89465df37afcf89cc0d578a001e5d40b766fc3390c55e6e965548ad89486597abd6983011eb9916f5c472cfe1bf5592a33982a8e442ff1b0579dadc1128a56a646e9d49f5fac2027dbd5d97a8f6ba31ec3050dace2e5eb283a0b15c0c9f152d2389983c59d1f58e0d7fd49ec6a45f5ecaf9f1083ad2bc838d682498e5e0861b60d4be9002cc74141e0f62a97d0ce8d8fe2aaf869db6b1eb756f7634fd65c415d75ea56d0914a398a30fc92fdf0a6b71f18de0a228fc7cd4a985b7d00467e3aad9a9629a8ac95b2bb6fd274817559cb0b202d46046a515544a0784cef6cc005c19147b0c220ab0f37cc27dbee7836e10e4f826aa9a47d68cc6f2ede4abfafd31dc40daa4bf1ac64aec2248e25d4d5fe3624edd7cff79fcfd00c5836ceb9284a3a4b31bc7213483307a287bda7d0c12388135b6b00ce8c22455983dc4d01a81042ee85fd0ebfdc4d9c2a25725f50fa7aff17d3ad37f9e4e26b9be6d4350cdeb4550652e22f86739c14000a585b94a944d97653d91d99e6f2f316e2d03e3dce7bb99c910e71c41ff8044bab6a1b70ef94bdc1ad7bdf190abc7345a1caf6fa1c24d5c9c8ca9a66a620080d253eff4a49611f13241f92643d731287d8d506454b6abddbb3ee924d6a755fcfdd1a012cc9b19cdf52a045560571a068885ad2d9d683cbda60bfe7bcd989e7113db62f87a08607dc60222796aea25b6506c26285a4c92dfe3f3533910242b8efd5c34ef1009aec18b30a9eb844eb33402b2b22de6f59958ada905259820dd4fe15a8f6e0b2a53094d6a9e45a1c1b91628ccd65d933a327ec5c59d8db53ff82031f6f4f706118db960e006e15a7e294772637ddace046044574c62833f181a2401487d61be1ea2bc5c98bee846d5c01688ae2ece2ee240143f955f7d72a564e3a42e1ec3396f9af51c72052a1b5cf50a1f86c7da6c696dba6954dda8c3a3197481f1c59629e3ae8dbd675ac7f52cf5a1323e508f19d1c99b896e9bdb2bc1d4b0fd1c53f4b3b381a5cec379cbd16a24ce1196b79098d7fbee7c953cc0c98475297931f2ba066666576d3ca9a53da90e0df748c8c8cc8fefbf23231b372d038d357f704b3083dc4e20c0962c5fb5e4dda146dd50acc2cae3583425bb6336bff5a06b4aca07ca97a79c3d0dffaa4afc6ae4d4a0514b6e67337784599c98f6953e8b83d7a459cba41f3a95706fe56431f6eb1e2692ffe437edde94059f11b7955a4b9064c0bb3aa166af11c44bec803c18efa77e241ff651b365c823c9f37b774ff882632b2ae0676375daefa2383f970b0d21690e29444d9e7344fd6df2fef51f9761358bd7820c6adae54cd46bf6ea5cd7e1d55283816f4413abe06fc201b67cf656b7f7ab1357692ec91b483a4a4b0342edf0f020ec7f4d4ac6a5efbbbb61aedf74c35dc699e4b406c63a96cd7c80b8df461891a47c53c302e406d304074e39e061d74d7d6ede8112011c595f1e5e2c0ac2dfe49fe72fa9f95fa9bb03070bd1db82e6e01d37dc88d882387b2bca50c67e260878577ff7555da82b79bd32e96d7eb037a8cb53ced4f989a6c2f7831c5b8ee7b9fffea66e84033df8b970098fb0e4374305b2f99309690f3de123506ad96cfe4282b7b0c40a045826f9e40d5d7c0a3a26dc3f4a496b00c066696bb5348d78b568c0be6512d6393b787d576837c74cf42660043ac2070f534bdeb871183c920adf0049dbe250c22757c01384010e5e105f470092242b90bc6ad8a697c1dcf5a47586268d537ba8c42888baefbf2eb770fcb43980776459cccbd00b18a07bbe664cadba3ff79f1d6b93d35a6095f54ac10bbebb882ae1807a3eded8310cff6c2eb266574f387a0a70acf77520f30f192716d4985368d578ccc9659c6d2bd9f3623a8778f523cb057dbef934b03f8a3fa028b27ecdd64eb28a41c0b76640e754c78900655b438df82c94edfffb0051db0f32ea83dae49f44a95a586f54e720f7c197efd87ddceb3d8eca9127e3561b34b7c84a5d5f6860471247c134d0684250ba8b723aa67dc0ef5a5cff5ff0f3b0115069b29c62845d7ba99b5dd1896f12d5639716444c28909b14f26d965dcb63ccf6db9a3afb329172967334504f9cf0b5dc447f3d625589e3b4765e442de7ca6f68dfa0669df0d946986650c841eabc50207f1608872efab9472acecef02847dcf3e2242fc69ad2746a400fca34cd6dd710239f302acc3e8d60da00d09eae034614266d79beb8573325c8d741c03435ed0a1737c11790b39c2eac8510fe1c0b5ec6c001116da93a8130048c75c5690ed05841cd2ed290e932c96d55d7f59031493c05067f43dc559f1475f40c4e171b24aae3d2d1b384edeeee645d5f7b36b2a3eea1a527b506b57d6609f65b88a9d4414d201fba44a4b618629c05041e4de6f2885356d6097b774a962d54827c5c82a7cb5068690ae6878b74630b57614a535a18694a0fd75591afc90625bdf12738621f89834b0f0546e999805731bdcb973aeca873b976dd565a4a1de21388bb608fc8399e0589742a04cf15bdc9001937b076808350da9e2e5df525e33fe72cba52bc043bf002275d09cc3a5383db331b8e3657242164465cfaf84980a8a26ba3a7cbaa4ceadd2a611b6bbe83c6f0feeba6e9ce50c8487bea8057fea79dc179ca71ab648a3118fcc6a625135eed0bcab3dfec170d5549b4115361984596d4e50c600b926c55a7bde6d63c1bfb14ff5d20323b8f8c264a88fdbab853f0ca8b452a24ee662a9a4b700c232c6f4ea68b12e98469ffaeed909367305a33436b550592ae8b88c8a219977393df841d5f92de2781dab5d4334d9a3b30d5ccc2604e923214e20841b7dcc293106a5a2e09141c5be02a59d6e2a37f4c69316ac537a9f01c51b66ee32a3737bcb0b7497de30738ccb0e98ad5f099d6efd3a01ce7472812ee9b478cc4df797b29435052bc30fb4af9b12e464f3732a399f38d008aa320dbf8f7c2b5848686fe3a1171568dae906cdb1c876c00eaeba670f971bc86d5b1bd4f0c25ffd6e7f7433531ab16cd97c60946ce63cf8440cbfb7120e624ed93aa79a1c3f37b5728218841722d7278d434d82b1086691c1b0dfef10c9f135dbb49354a3a59735093b6fe151c573d64fed696a3f0e4ef87884386014c27a8d5041f99e331c6372e817e79c620adb01b390b965edea382081c7e7f268809d3806b76adf2d275bd8787b83b892995331c3d96f14620c6972006ce9230092a50b5b6a2e85da9004a141b876987aef5366ee37580f2a4a51d34ec95ae8252de1bcbea3f89d0981141e3d0e721625436bb7458817b7d0704818cac250b1af2497610bd5823ad093ab1915e3c898d3383e432486ec806d590466f0b53dd48843f536a1669f0ec934615719a5f05bb300f3f8586eee96db58ca940a17625913a679e46a4c4806bf2d29fbf967828f54d6b49a8c8d6c5f7d82b17acbb6e8e8349cbae1b2b4fe88fe6bad353f9457f1a5ccb12da4eaa34ec2408aa4b991fa17e7d0b0edb3668a1084f557f2090851a2c265f8695e0dec369cf58c38c78458fdd37c8e346e01e07f65a711fd7afda654552a3f4e88fb8a6e03e61f1d3c200b5e6317d85fda782c1163496e1317b76cab55c68690740d99c6cb798bf27b4beeea9d1e238a1c3e9182f7e3d7dbf5e74194261d6eb6b6eb8571bbb4de585316b22524821091bb2eac3906f1f4649696eb82b855c778f24c9b413d763019444cd78e2ce9e491bdc388b19cd347360a643108dffcdad36714f26b1d61e1c160b714ee95b5cf676ada9dd74b5324188ca2caf68f18d13cf41efce318a4911c6f23a121c824de5ecc994cfbdca9dafae23a9a89ff490495cab881af50752cbbe3f9fc6688c1951f88bfbe9310223df9232ec44d32993c896913fbf6f6c0ee9bfec8bf64b124b4d1a405a70875d4aaffbadf08701faaa41b78bc849288cb38d2ae59ecb61e475f1b031c502e139a1b2958ac025c24d7ee284d43e26b20b141e7974f18816ed054d7d16dac") r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x22c4c2) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r3, 0x9) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)="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") (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x6, 0x22c4c2) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) (async) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r3, 0x9) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) 23:38:16 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 23:38:16 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x401) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:16 executing program 5: syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, 0xffffffffffffffff, 0x20ffe000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:16 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x30, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x4480) 23:38:16 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x143041) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x4000010, r0, 0x3) 23:38:16 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x30a40) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) 23:38:16 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 23:38:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x30, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x4480) 23:38:17 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x10000) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x30a40) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) 23:38:17 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x10000) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x10000) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:17 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x143041) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x4000010, r0, 0x3) 23:38:17 executing program 5: syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, 0xffffffffffffffff, 0x20ffe000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:17 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40000, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 23:38:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x30a40) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) 23:38:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x30, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x4480) 23:38:17 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/110, 0x6e) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x6, r1, &(0x7f0000000080)="49c0ecafd15470486188b2eb6f1a07853a4d6b82bd38f7451155c230cec4d1e7ddb85256adbc37514da244a56d4dbfbfed62b573c5d2f998a1e20ac28e49ec45a0f46a8337bb9fbfc19c4f5b13538f5b82f8303af8649c4ae237fa068cd6ca2a5038dcde79d0a77b12c722b7ffa3b419f784623f674a7496049525ac4b55e7b46b5864daf50eba46330cef0c44421a790abd9fde9215a7f1de0b655e5316a8a8041718595ef4069c80c4ec2eaed7e002fc2089400f7cd3776919f302441f71", 0xbf, 0x2, 0x0, 0x2}]) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) 23:38:17 executing program 5: syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, 0xffffffffffffffff, 0x20ffe000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:17 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x143041) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000002, 0x4000010, r0, 0x3) 23:38:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x86080) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 23:38:17 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x4, 0x10000) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x110, 0xffffffffffffffff, 0x10000000) 23:38:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x86080) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 23:38:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x30, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x4480) 23:38:17 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:17 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/110, 0x6e) (async) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x6, r1, &(0x7f0000000080)="49c0ecafd15470486188b2eb6f1a07853a4d6b82bd38f7451155c230cec4d1e7ddb85256adbc37514da244a56d4dbfbfed62b573c5d2f998a1e20ac28e49ec45a0f46a8337bb9fbfc19c4f5b13538f5b82f8303af8649c4ae237fa068cd6ca2a5038dcde79d0a77b12c722b7ffa3b419f784623f674a7496049525ac4b55e7b46b5864daf50eba46330cef0c44421a790abd9fde9215a7f1de0b655e5316a8a8041718595ef4069c80c4ec2eaed7e002fc2089400f7cd3776919f302441f71", 0xbf, 0x2, 0x0, 0x2}]) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) 23:38:17 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x30, 0xffffffffffffffff, 0x0) 23:38:17 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 1) 23:38:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x86080) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) pipe2(&(0x7f0000000000), 0x86080) (async) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) 23:38:17 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x30, 0xffffffffffffffff, 0x0) 23:38:17 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/110, 0x6e) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x6, r1, &(0x7f0000000080)="49c0ecafd15470486188b2eb6f1a07853a4d6b82bd38f7451155c230cec4d1e7ddb85256adbc37514da244a56d4dbfbfed62b573c5d2f998a1e20ac28e49ec45a0f46a8337bb9fbfc19c4f5b13538f5b82f8303af8649c4ae237fa068cd6ca2a5038dcde79d0a77b12c722b7ffa3b419f784623f674a7496049525ac4b55e7b46b5864daf50eba46330cef0c44421a790abd9fde9215a7f1de0b655e5316a8a8041718595ef4069c80c4ec2eaed7e002fc2089400f7cd3776919f302441f71", 0xbf, 0x2, 0x0, 0x2}]) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/110, 0x6e) (async) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x6, r1, &(0x7f0000000080)="49c0ecafd15470486188b2eb6f1a07853a4d6b82bd38f7451155c230cec4d1e7ddb85256adbc37514da244a56d4dbfbfed62b573c5d2f998a1e20ac28e49ec45a0f46a8337bb9fbfc19c4f5b13538f5b82f8303af8649c4ae237fa068cd6ca2a5038dcde79d0a77b12c722b7ffa3b419f784623f674a7496049525ac4b55e7b46b5864daf50eba46330cef0c44421a790abd9fde9215a7f1de0b655e5316a8a8041718595ef4069c80c4ec2eaed7e002fc2089400f7cd3776919f302441f71", 0xbf, 0x2, 0x0, 0x2}]) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) (async) 23:38:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x110, 0xffffffffffffffff, 0x10000000) 23:38:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x30, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x4480) 23:38:17 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x30, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x30, 0xffffffffffffffff, 0x0) (async) [ 3189.932020][ T2625] FAULT_INJECTION: forcing a failure. [ 3189.932020][ T2625] name failslab, interval 1, probability 0, space 0, times 0 [ 3189.951403][ T2625] CPU: 1 PID: 2625 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3189.961323][ T2625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3189.971220][ T2625] Call Trace: [ 3189.974341][ T2625] [ 3189.977117][ T2625] dump_stack_lvl+0x151/0x1b7 23:38:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x30, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x4480) 23:38:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0xc2a02) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15a127d9f4ffff3950323030302e4c000000000000"], 0x15) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000040)={@remote, @empty, 0x0, "dae475cc2234d8faf42de2c72a13f4327dc46cd49c20fe86fc643ee1857ff864", 0x1, 0x8, 0x6, 0x3ff}, 0x3c) 23:38:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x110, 0xffffffffffffffff, 0x10000000) 23:38:17 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x30, r0, 0x0) 23:38:17 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0x4c000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:17 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 2) 23:38:17 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) 23:38:17 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x12, r0, 0xffffffffffffffff) 23:38:17 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0x4c000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:17 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) [ 3189.981641][ T2625] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3189.986932][ T2625] dump_stack+0x15/0x18 [ 3189.990935][ T2625] should_fail_ex+0x3d0/0x520 [ 3189.995450][ T2625] ? vm_area_dup+0x27/0x290 [ 3189.999785][ T2625] __should_failslab+0xaf/0xf0 [ 3189.999837][ T2625] should_failslab+0x9/0x20 [ 3189.999864][ T2625] kmem_cache_alloc+0x3b/0x2c0 23:38:17 executing program 4: syz_open_dev$usbmon(0x0, 0xffffffffffffffff, 0x533302) 23:38:17 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0x4c000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 3189.999897][ T2625] ? vma_merge+0x701/0xcc0 [ 3189.999926][ T2625] vm_area_dup+0x27/0x290 [ 3189.999949][ T2625] ? __split_vma+0x19a/0x880 [ 3189.999977][ T2625] __split_vma+0x1ba/0x880 [ 3190.000009][ T2625] split_vma+0x7c/0xd0 [ 3190.000036][ T2625] mlock_fixup+0x695/0x7f0 [ 3190.000066][ T2625] apply_vma_lock_flags+0x327/0x480 [ 3190.000094][ T2625] ? do_mlock+0x680/0x680 [ 3190.000119][ T2625] ? rwsem_write_trylock+0x15b/0x290 [ 3190.000146][ T2625] ? bit_wait_io_timeout+0x120/0x120 [ 3190.000178][ T2625] do_mlock+0x4ed/0x680 [ 3190.000205][ T2625] ? lru_gen_update_size+0x580/0x580 [ 3190.000236][ T2625] ? debug_smp_processor_id+0x17/0x20 [ 3190.000268][ T2625] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3190.000295][ T2625] __x64_sys_mlock2+0xb8/0xe0 [ 3190.000321][ T2625] do_syscall_64+0x3d/0xb0 [ 3190.000346][ T2625] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3190.000372][ T2625] RIP: 0033:0x7f3e4807cae9 [ 3190.000393][ T2625] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3190.000411][ T2625] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3190.000438][ T2625] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 [ 3190.000455][ T2625] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 3190.000470][ T2625] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3190.000485][ T2625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3190.000499][ T2625] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3190.000520][ T2625] [ 3190.052987][ T2658] FAULT_INJECTION: forcing a failure. [ 3190.052987][ T2658] name failslab, interval 1, probability 0, space 0, times 0 [ 3190.053021][ T2658] CPU: 1 PID: 2658 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3190.053047][ T2658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3190.053060][ T2658] Call Trace: [ 3190.053067][ T2658] [ 3190.053075][ T2658] dump_stack_lvl+0x151/0x1b7 [ 3190.053110][ T2658] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3190.053141][ T2658] ? vm_area_dup+0x27/0x290 [ 3190.053168][ T2658] dump_stack+0x15/0x18 [ 3190.053190][ T2658] should_fail_ex+0x3d0/0x520 [ 3190.053215][ T2658] ? vm_area_dup+0x65/0x290 [ 3190.053240][ T2658] __should_failslab+0xaf/0xf0 [ 3190.053274][ T2658] should_failslab+0x9/0x20 [ 3190.053299][ T2658] kmem_cache_alloc+0x3b/0x2c0 [ 3190.053332][ T2658] vm_area_dup+0x65/0x290 [ 3190.053358][ T2658] __split_vma+0x1ba/0x880 [ 3190.053390][ T2658] split_vma+0x7c/0xd0 [ 3190.053419][ T2658] mlock_fixup+0x695/0x7f0 [ 3190.053448][ T2658] apply_vma_lock_flags+0x327/0x480 [ 3190.053477][ T2658] ? do_mlock+0x680/0x680 [ 3190.053501][ T2658] ? rwsem_write_trylock+0x15b/0x290 [ 3190.053529][ T2658] ? bit_wait_io_timeout+0x120/0x120 [ 3190.053561][ T2658] do_mlock+0x4ed/0x680 [ 3190.053589][ T2658] ? lru_gen_update_size+0x580/0x580 [ 3190.053618][ T2658] ? debug_smp_processor_id+0x17/0x20 [ 3190.053649][ T2658] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3190.053676][ T2658] __x64_sys_mlock2+0xb8/0xe0 [ 3190.053701][ T2658] do_syscall_64+0x3d/0xb0 [ 3190.053736][ T2658] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3190.053762][ T2658] RIP: 0033:0x7f3e4807cae9 [ 3190.053782][ T2658] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3190.053800][ T2658] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3190.053824][ T2658] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 23:38:17 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0xc2a02) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0xc2a02) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15a127d9f4ffff3950323030302e4c000000000000"], 0x15) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000040)={@remote, @empty, 0x0, "dae475cc2234d8faf42de2c72a13f4327dc46cd49c20fe86fc643ee1857ff864", 0x1, 0x8, 0x6, 0x3ff}, 0x3c) 23:38:17 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 3) 23:38:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x12, r0, 0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x12, r0, 0xffffffffffffffff) (async) 23:38:17 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) 23:38:17 executing program 4: syz_open_dev$usbmon(0x0, 0xffffffffffffffff, 0x533302) 23:38:17 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0xca, 0x40202) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, @multicast2, 0xf, 0x14}}) 23:38:17 executing program 4: syz_open_dev$usbmon(0x0, 0xffffffffffffffff, 0x533302) 23:38:17 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0xca, 0x40202) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, @multicast2, 0xf, 0x14}}) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xca, 0x40202) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, @multicast2, 0xf, 0x14}}) (async) 23:38:17 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 4) 23:38:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0xc2a02) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15a127d9f4ffff3950323030302e4c000000000000"], 0x15) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000040)={@remote, @empty, 0x0, "dae475cc2234d8faf42de2c72a13f4327dc46cd49c20fe86fc643ee1857ff864", 0x1, 0x8, 0x6, 0x3ff}, 0x3c) [ 3190.053840][ T2658] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 3190.053854][ T2658] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3190.053868][ T2658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3190.053880][ T2658] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3190.053899][ T2658] 23:38:17 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x12, r0, 0xffffffffffffffff) 23:38:17 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000840), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r4, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'tunl0\x00', r4, 0x0, 0x8, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x10, 0x0, 0x8, 0x3, {{0xa, 0x4, 0x2, 0x1, 0x28, 0x65, 0x0, 0x20, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, {[@lsrr={0x83, 0x13, 0x71, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1]}]}}}}}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4c4}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9dd2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x320}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x234, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1a0}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x180}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x10000000000) 23:38:17 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0xca, 0x40202) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, @multicast2, 0xf, 0x14}}) 23:38:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0xde07, 0x444700) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xfffffffffffffffc) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0), 0x14) 23:38:17 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x533302) 23:38:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80f9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x101}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf, 0x1f, 0x1}, 0xf) 23:38:17 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 5) 23:38:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0xde07, 0x444700) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xfffffffffffffffc) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0), 0x14) 23:38:17 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x533302) 23:38:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (rerun: 64) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0xde07, 0x444700) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xfffffffffffffffc) (async, rerun: 32) bind$802154_dgram(0xffffffffffffffff, &(0x7f00000000c0), 0x14) (rerun: 32) 23:38:17 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 6) 23:38:17 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80f9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x101}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf, 0x1f, 0x1}, 0xf) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80f9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x101}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) pipe2$9p(&(0x7f0000000000), 0x80880) (async) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf, 0x1f, 0x1}, 0xf) (async) 23:38:17 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x533302) [ 3190.504713][ T2694] FAULT_INJECTION: forcing a failure. [ 3190.504713][ T2694] name failslab, interval 1, probability 0, space 0, times 0 [ 3190.518598][ T2694] CPU: 1 PID: 2694 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3190.528522][ T2694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3190.528545][ T2694] Call Trace: [ 3190.528554][ T2694] [ 3190.528563][ T2694] dump_stack_lvl+0x151/0x1b7 [ 3190.528600][ T2694] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3190.528627][ T2694] ? __kernel_text_address+0xd/0x40 [ 3190.528663][ T2694] ? arch_stack_walk+0xf3/0x140 [ 3190.528699][ T2694] dump_stack+0x15/0x18 [ 3190.528725][ T2694] should_fail_ex+0x3d0/0x520 [ 3190.528751][ T2694] ? mas_alloc_nodes+0x267/0x7d0 [ 3190.528779][ T2694] __should_failslab+0xaf/0xf0 [ 3190.528811][ T2694] should_failslab+0x9/0x20 [ 3190.528833][ T2694] kmem_cache_alloc+0x3b/0x2c0 [ 3190.528865][ T2694] mas_alloc_nodes+0x267/0x7d0 [ 3190.528895][ T2694] mas_preallocate+0xef2/0x1bd0 [ 3190.528926][ T2694] ? mas_destroy+0x3280/0x3280 [ 3190.528958][ T2694] __vma_adjust+0x6aa/0x1fe0 [ 3190.528992][ T2694] ? vma_start_write+0x160/0x160 [ 3190.529021][ T2694] ? rwsem_write_trylock+0x15b/0x290 [ 3190.529047][ T2694] ? anon_vma_clone+0x49a/0x4f0 [ 3190.529072][ T2694] __split_vma+0x619/0x880 [ 3190.529105][ T2694] split_vma+0x7c/0xd0 [ 3190.529135][ T2694] mlock_fixup+0x695/0x7f0 [ 3190.529164][ T2694] apply_vma_lock_flags+0x327/0x480 [ 3190.529192][ T2694] ? do_mlock+0x680/0x680 [ 3190.529216][ T2694] ? rwsem_write_trylock+0x15b/0x290 [ 3190.529244][ T2694] ? bit_wait_io_timeout+0x120/0x120 [ 3190.529276][ T2694] do_mlock+0x4ed/0x680 [ 3190.529303][ T2694] ? lru_gen_update_size+0x580/0x580 [ 3190.529332][ T2694] ? debug_smp_processor_id+0x17/0x20 [ 3190.529362][ T2694] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3190.529389][ T2694] __x64_sys_mlock2+0xb8/0xe0 [ 3190.529415][ T2694] do_syscall_64+0x3d/0xb0 [ 3190.529438][ T2694] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3190.529462][ T2694] RIP: 0033:0x7f3e4807cae9 [ 3190.529481][ T2694] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3190.529500][ T2694] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3190.529525][ T2694] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 [ 3190.529543][ T2694] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 3190.529558][ T2694] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3190.529572][ T2694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3190.529587][ T2694] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3190.529607][ T2694] [ 3190.560643][ T2710] FAULT_INJECTION: forcing a failure. [ 3190.560643][ T2710] name failslab, interval 1, probability 0, space 0, times 0 [ 3190.560677][ T2710] CPU: 0 PID: 2710 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3190.560702][ T2710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3190.560715][ T2710] Call Trace: [ 3190.560722][ T2710] [ 3190.560731][ T2710] dump_stack_lvl+0x151/0x1b7 [ 3190.560764][ T2710] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3190.560797][ T2710] dump_stack+0x15/0x18 [ 3190.560822][ T2710] should_fail_ex+0x3d0/0x520 [ 3190.560854][ T2710] __should_failslab+0xaf/0xf0 [ 3190.560889][ T2710] should_failslab+0x9/0x20 [ 3190.560913][ T2710] kmem_cache_alloc_bulk+0x2e/0x3d0 [ 3190.560948][ T2710] mas_alloc_nodes+0x3ce/0x7d0 [ 3190.560981][ T2710] mas_preallocate+0xef2/0x1bd0 [ 3190.561017][ T2710] ? mas_destroy+0x3280/0x3280 [ 3190.561051][ T2710] __vma_adjust+0x6aa/0x1fe0 [ 3190.561085][ T2710] ? vma_start_write+0x160/0x160 [ 3190.561116][ T2710] ? rwsem_write_trylock+0x15b/0x290 [ 3190.561152][ T2710] ? anon_vma_clone+0x49a/0x4f0 [ 3190.561180][ T2710] __split_vma+0x619/0x880 [ 3190.561215][ T2710] split_vma+0x7c/0xd0 [ 3190.561247][ T2710] mlock_fixup+0x695/0x7f0 [ 3190.561279][ T2710] apply_vma_lock_flags+0x327/0x480 [ 3190.561309][ T2710] ? do_mlock+0x680/0x680 [ 3190.561334][ T2710] ? rwsem_write_trylock+0x15b/0x290 [ 3190.561362][ T2710] ? bit_wait_io_timeout+0x120/0x120 [ 3190.561394][ T2710] do_mlock+0x4ed/0x680 [ 3190.561422][ T2710] ? lru_gen_update_size+0x580/0x580 [ 3190.561452][ T2710] ? debug_smp_processor_id+0x17/0x20 [ 3190.561484][ T2710] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3190.561513][ T2710] __x64_sys_mlock2+0xb8/0xe0 [ 3190.561540][ T2710] do_syscall_64+0x3d/0xb0 [ 3190.561564][ T2710] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3190.561588][ T2710] RIP: 0033:0x7f3e4807cae9 [ 3190.561607][ T2710] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3190.561628][ T2710] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3190.561670][ T2710] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 [ 3190.561688][ T2710] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 3190.561703][ T2710] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3190.561717][ T2710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3190.561730][ T2710] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3190.561751][ T2710] [ 3190.593444][ T2727] FAULT_INJECTION: forcing a failure. [ 3190.593444][ T2727] name failslab, interval 1, probability 0, space 0, times 0 [ 3190.593479][ T2727] CPU: 0 PID: 2727 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3190.593504][ T2727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3190.593518][ T2727] Call Trace: [ 3190.593525][ T2727] [ 3190.593533][ T2727] dump_stack_lvl+0x151/0x1b7 [ 3190.593565][ T2727] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3190.593593][ T2727] ? mt_find+0x27a/0x560 [ 3190.593626][ T2727] dump_stack+0x15/0x18 [ 3190.593662][ T2727] should_fail_ex+0x3d0/0x520 [ 3190.593691][ T2727] ? vm_area_dup+0x27/0x290 [ 3190.593718][ T2727] __should_failslab+0xaf/0xf0 [ 3190.593751][ T2727] should_failslab+0x9/0x20 [ 3190.593774][ T2727] kmem_cache_alloc+0x3b/0x2c0 [ 3190.593807][ T2727] ? vma_merge+0x701/0xcc0 [ 3190.593854][ T2727] vm_area_dup+0x27/0x290 [ 3190.593877][ T2727] ? __split_vma+0x1a1/0x880 [ 3190.593904][ T2727] __split_vma+0x1ba/0x880 [ 3190.593936][ T2727] split_vma+0x7c/0xd0 [ 3190.593966][ T2727] mlock_fixup+0x707/0x7f0 [ 3190.593995][ T2727] apply_vma_lock_flags+0x327/0x480 [ 3190.594023][ T2727] ? do_mlock+0x680/0x680 [ 3190.594047][ T2727] ? rwsem_write_trylock+0x15b/0x290 [ 3190.594081][ T2727] ? bit_wait_io_timeout+0x120/0x120 [ 3190.594113][ T2727] do_mlock+0x4ed/0x680 [ 3190.594142][ T2727] ? lru_gen_update_size+0x580/0x580 [ 3190.594171][ T2727] ? debug_smp_processor_id+0x17/0x20 [ 3190.594202][ T2727] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3190.594229][ T2727] __x64_sys_mlock2+0xb8/0xe0 [ 3190.594256][ T2727] do_syscall_64+0x3d/0xb0 [ 3190.594280][ T2727] ? sysvec_apic_timer_interrupt+0x55/0xc0 [ 3190.594311][ T2727] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3190.594334][ T2727] RIP: 0033:0x7f3e4807cae9 [ 3190.594352][ T2727] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3190.594370][ T2727] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3190.594394][ T2727] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 [ 3190.594411][ T2727] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 3190.594425][ T2727] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 23:38:18 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000840), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r4, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'tunl0\x00', r4, 0x0, 0x8, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x10, 0x0, 0x8, 0x3, {{0xa, 0x4, 0x2, 0x1, 0x28, 0x65, 0x0, 0x20, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, {[@lsrr={0x83, 0x13, 0x71, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1]}]}}}}}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4c4}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9dd2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x320}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x234, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1a0}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x180}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x10000000000) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) (async) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000800)) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000840), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r4, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'tunl0\x00', r4, 0x0, 0x8, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x10, 0x0, 0x8, 0x3, {{0xa, 0x4, 0x2, 0x1, 0x28, 0x65, 0x0, 0x20, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, {[@lsrr={0x83, 0x13, 0x71, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1]}]}}}}}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4c4}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9dd2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x320}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x234, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1a0}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x180}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x10000000000) (async) 23:38:18 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x6) 23:38:18 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80f9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x101}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) pipe2$9p(&(0x7f0000000000), 0x80880) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf, 0x1f, 0x1}, 0xf) 23:38:18 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 23:38:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x48c840, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x3010, r0, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x5}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) read$rfkill(0xffffffffffffffff, &(0x7f0000000200), 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000001400), 0x108800, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000100)={0xffffdff7, 0x8a, "e669c1a04b22cb490b3d14315282ecee6c9152f4b4bf6006d2e5331b15ab62019440ac8a2649d7027b5748a5f72ead77e389d9b53695b2f9daf88def20fb4981dc4cf585d5f7ae982e81bf29902ec591935fd0c513923ec6b2adfaec3abd64b01cf435c22540565cc9dac6f86f7bf0ebd7dd6d78a105fa5e01c19eef34c6c45e8aff1bce04827613634c"}) 23:38:18 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 7) [ 3190.594440][ T2727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3190.594453][ T2727] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3190.594474][ T2727] 23:38:18 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x48c840, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x3010, r0, 0x4) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x5}) (async) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) read$rfkill(0xffffffffffffffff, &(0x7f0000000200), 0x8) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000001400), 0x108800, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) (async) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000100)={0xffffdff7, 0x8a, "e669c1a04b22cb490b3d14315282ecee6c9152f4b4bf6006d2e5331b15ab62019440ac8a2649d7027b5748a5f72ead77e389d9b53695b2f9daf88def20fb4981dc4cf585d5f7ae982e81bf29902ec591935fd0c513923ec6b2adfaec3abd64b01cf435c22540565cc9dac6f86f7bf0ebd7dd6d78a105fa5e01c19eef34c6c45e8aff1bce04827613634c"}) 23:38:18 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x0) [ 3191.342333][ T2742] FAULT_INJECTION: forcing a failure. [ 3191.342333][ T2742] name failslab, interval 1, probability 0, space 0, times 0 [ 3191.360751][ T2742] CPU: 0 PID: 2742 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3191.371976][ T2742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3191.381868][ T2742] Call Trace: [ 3191.384991][ T2742] [ 3191.387772][ T2742] dump_stack_lvl+0x151/0x1b7 23:38:18 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x6) 23:38:18 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) (async, rerun: 32) socketpair(0xa, 0x80000, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000840), 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r4, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'tunl0\x00', r4, 0x0, 0x8, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x10, 0x0, 0x8, 0x3, {{0xa, 0x4, 0x2, 0x1, 0x28, 0x65, 0x0, 0x20, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x27}, {[@lsrr={0x83, 0x13, 0x71, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1]}]}}}}}) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x4000, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb4, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x10001}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4c4}, @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9dd2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x320}]]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x234, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1a0}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x180}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x234}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x10000000000) (rerun: 64) 23:38:18 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x2, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x48c840, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x3010, r0, 0x4) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x3010, r0, 0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x5}) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) read$rfkill(0xffffffffffffffff, &(0x7f0000000200), 0x8) (async) read$rfkill(0xffffffffffffffff, &(0x7f0000000200), 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000001400), 0x108800, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000100)={0xffffdff7, 0x8a, "e669c1a04b22cb490b3d14315282ecee6c9152f4b4bf6006d2e5331b15ab62019440ac8a2649d7027b5748a5f72ead77e389d9b53695b2f9daf88def20fb4981dc4cf585d5f7ae982e81bf29902ec591935fd0c513923ec6b2adfaec3abd64b01cf435c22540565cc9dac6f86f7bf0ebd7dd6d78a105fa5e01c19eef34c6c45e8aff1bce04827613634c"}) 23:38:18 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x6) 23:38:18 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x0) 23:38:18 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) [ 3191.392284][ T2742] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3191.397586][ T2742] dump_stack+0x15/0x18 [ 3191.401570][ T2742] should_fail_ex+0x3d0/0x520 [ 3191.406092][ T2742] ? vm_area_dup+0x65/0x290 [ 3191.410423][ T2742] __should_failslab+0xaf/0xf0 [ 3191.415037][ T2742] should_failslab+0x9/0x20 [ 3191.415078][ T2742] kmem_cache_alloc+0x3b/0x2c0 23:38:18 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket(0x1d, 0x6, 0x800) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000000)=0x4, 0x4) 23:38:18 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) (async) 23:38:18 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 8) 23:38:18 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0xc2a02) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="15a127d9f4ffff3950323030302e4c000000000000"], 0x15) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000040)={@remote, @empty, 0x0, "dae475cc2234d8faf42de2c72a13f4327dc46cd49c20fe86fc643ee1857ff864", 0x1, 0x8, 0x6, 0x3ff}, 0x3c) 23:38:18 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) r1 = socket(0x1d, 0x6, 0x800) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000000)=0x4, 0x4) 23:38:18 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) 23:38:18 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 9) [ 3191.415113][ T2742] vm_area_dup+0x65/0x290 [ 3191.415141][ T2742] __split_vma+0x1ba/0x880 [ 3191.415174][ T2742] split_vma+0x7c/0xd0 [ 3191.415204][ T2742] mlock_fixup+0x707/0x7f0 [ 3191.415232][ T2742] apply_vma_lock_flags+0x327/0x480 [ 3191.415260][ T2742] ? do_mlock+0x680/0x680 [ 3191.415284][ T2742] ? rwsem_write_trylock+0x15b/0x290 [ 3191.415313][ T2742] ? bit_wait_io_timeout+0x120/0x120 [ 3191.415345][ T2742] do_mlock+0x4ed/0x680 [ 3191.415373][ T2742] ? lru_gen_update_size+0x580/0x580 [ 3191.415402][ T2742] ? debug_smp_processor_id+0x17/0x20 [ 3191.415432][ T2742] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3191.415461][ T2742] __x64_sys_mlock2+0xb8/0xe0 [ 3191.415486][ T2742] do_syscall_64+0x3d/0xb0 [ 3191.415511][ T2742] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3191.415536][ T2742] RIP: 0033:0x7f3e4807cae9 [ 3191.415556][ T2742] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3191.415576][ T2742] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3191.415601][ T2742] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 [ 3191.415618][ T2742] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 3191.415633][ T2742] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3191.415647][ T2742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3191.415660][ T2742] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3191.415690][ T2742] [ 3191.466050][ T2793] FAULT_INJECTION: forcing a failure. [ 3191.466050][ T2793] name failslab, interval 1, probability 0, space 0, times 0 [ 3191.466085][ T2793] CPU: 1 PID: 2793 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3191.466110][ T2793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3191.466124][ T2793] Call Trace: [ 3191.466141][ T2793] [ 3191.466150][ T2793] dump_stack_lvl+0x151/0x1b7 [ 3191.466185][ T2793] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3191.466214][ T2793] ? __kernel_text_address+0xd/0x40 [ 3191.466251][ T2793] dump_stack+0x15/0x18 [ 3191.466274][ T2793] should_fail_ex+0x3d0/0x520 [ 3191.466299][ T2793] ? mas_alloc_nodes+0x267/0x7d0 [ 3191.466331][ T2793] __should_failslab+0xaf/0xf0 [ 3191.466364][ T2793] should_failslab+0x9/0x20 [ 3191.466387][ T2793] kmem_cache_alloc+0x3b/0x2c0 [ 3191.466419][ T2793] mas_alloc_nodes+0x267/0x7d0 [ 3191.466449][ T2793] mas_preallocate+0xef2/0x1bd0 [ 3191.466481][ T2793] ? mas_destroy+0x3280/0x3280 [ 3191.466507][ T2793] ? rwsem_write_trylock+0x15b/0x290 [ 3191.466537][ T2793] __vma_adjust+0x6aa/0x1fe0 [ 3191.466571][ T2793] ? vma_start_write+0x160/0x160 [ 3191.466600][ T2793] ? rwsem_write_trylock+0x15b/0x290 [ 3191.466626][ T2793] ? anon_vma_clone+0x4a1/0x4f0 [ 3191.466647][ T2793] ? __kasan_check_write+0x14/0x20 [ 3191.466678][ T2793] __split_vma+0x619/0x880 [ 3191.466710][ T2793] split_vma+0x7c/0xd0 [ 3191.466739][ T2793] mlock_fixup+0x707/0x7f0 [ 3191.466768][ T2793] apply_vma_lock_flags+0x327/0x480 [ 3191.466796][ T2793] ? do_mlock+0x680/0x680 [ 3191.466820][ T2793] ? rwsem_write_trylock+0x15b/0x290 [ 3191.466847][ T2793] ? bit_wait_io_timeout+0x120/0x120 [ 3191.466878][ T2793] do_mlock+0x4ed/0x680 [ 3191.466906][ T2793] ? lru_gen_update_size+0x580/0x580 [ 3191.466935][ T2793] ? debug_smp_processor_id+0x17/0x20 [ 3191.466966][ T2793] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3191.466994][ T2793] __x64_sys_mlock2+0xb8/0xe0 [ 3191.467020][ T2793] do_syscall_64+0x3d/0xb0 [ 3191.467044][ T2793] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3191.467069][ T2793] RIP: 0033:0x7f3e4807cae9 [ 3191.467087][ T2793] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3191.467109][ T2793] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3191.467140][ T2793] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 [ 3191.467158][ T2793] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 3191.467173][ T2793] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3191.467187][ T2793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3191.467201][ T2793] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3191.467221][ T2793] [ 3191.501155][ T2804] FAULT_INJECTION: forcing a failure. [ 3191.501155][ T2804] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:38:19 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 3191.894931][ T2804] CPU: 0 PID: 2804 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3191.894968][ T2804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3191.894982][ T2804] Call Trace: [ 3191.894989][ T2804] [ 3191.894999][ T2804] dump_stack_lvl+0x151/0x1b7 [ 3191.895034][ T2804] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3191.895067][ T2804] dump_stack+0x15/0x18 [ 3191.895091][ T2804] should_fail_ex+0x3d0/0x520 [ 3191.895117][ T2804] should_fail_alloc_page+0x68/0x90 [ 3191.895148][ T2804] __alloc_pages+0x1f4/0x780 [ 3191.895188][ T2804] ? prep_new_page+0x110/0x110 [ 3191.895220][ T2804] ? mas_store_prealloc+0x3c0/0x3c0 [ 3191.895251][ T2804] pte_alloc_one+0x73/0x1b0 [ 3191.895280][ T2804] ? pfn_modify_allowed+0x2f0/0x2f0 [ 3191.895311][ T2804] ? mas_store_prealloc+0x248/0x3c0 [ 3191.895338][ T2804] ? uprobe_mmap+0x178/0x1180 [ 3191.895369][ T2804] __pte_alloc+0x86/0x350 [ 3191.895390][ T2804] ? pmd_install+0x260/0x260 [ 3191.895411][ T2804] ? __kasan_check_read+0x11/0x20 [ 3191.895439][ T2804] ? hugepage_vma_check+0x182/0x4f0 [ 3191.895462][ T2804] handle_mm_fault+0x2d16/0x2f40 [ 3191.895490][ T2804] ? numa_migrate_prep+0xe0/0xe0 [ 3191.895513][ T2804] ? follow_page_mask+0x518/0x1070 [ 3191.895547][ T2804] ? follow_page+0x250/0x250 [ 3191.895580][ T2804] __get_user_pages+0x377/0xf20 [ 3191.895616][ T2804] ? populate_vma_page_range+0x120/0x120 [ 3191.895652][ T2804] __mm_populate+0x375/0x570 [ 3191.895683][ T2804] ? do_mlock+0x680/0x680 [ 3191.895710][ T2804] ? check_vma_flags+0x2d0/0x2d0 [ 3191.895744][ T2804] do_mlock+0x57a/0x680 [ 3191.895771][ T2804] ? lru_gen_update_size+0x580/0x580 [ 3191.895799][ T2804] ? debug_smp_processor_id+0x17/0x20 [ 3191.895829][ T2804] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3191.895857][ T2804] __x64_sys_mlock2+0xb8/0xe0 [ 3191.895883][ T2804] do_syscall_64+0x3d/0xb0 [ 3191.895907][ T2804] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3191.895932][ T2804] RIP: 0033:0x7f3e4807cae9 [ 3191.895950][ T2804] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3191.895969][ T2804] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3191.895993][ T2804] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 [ 3191.896010][ T2804] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 3191.896025][ T2804] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3191.896039][ T2804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 23:38:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400010000000000000000000000ffff7f000001e9b5bf514860259449cce309d16e5c"], 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xe0d8758ec8b6737b}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) syz_io_uring_setup(0x6773, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x7792, &(0x7f0000000240), &(0x7f00000002c0), 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) 23:38:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) r1 = socket(0x1d, 0x6, 0x800) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000000)=0x4, 0x4) 23:38:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x26801) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) 23:38:19 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 10) 23:38:19 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:19 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (fail_nth: 1) 23:38:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) 23:38:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x26801) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) [ 3191.896052][ T2804] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3191.896072][ T2804] [ 3192.176201][ T2815] FAULT_INJECTION: forcing a failure. [ 3192.176201][ T2815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3192.195819][ T2821] FAULT_INJECTION: forcing a failure. [ 3192.195819][ T2821] name failslab, interval 1, probability 0, space 0, times 0 [ 3192.204599][ T2815] CPU: 1 PID: 2815 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3192.218154][ T2815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3192.228042][ T2815] Call Trace: [ 3192.231164][ T2815] [ 3192.234047][ T2815] dump_stack_lvl+0x151/0x1b7 [ 3192.238564][ T2815] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3192.243859][ T2815] dump_stack+0x15/0x18 23:38:19 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async, rerun: 32) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) 23:38:19 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0xfffffffffffffd8a) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) 23:38:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) [ 3192.247852][ T2815] should_fail_ex+0x3d0/0x520 [ 3192.252360][ T2815] should_fail_alloc_page+0x68/0x90 [ 3192.257398][ T2815] __alloc_pages+0x1f4/0x780 [ 3192.261823][ T2815] ? prep_new_page+0x110/0x110 [ 3192.266426][ T2815] ? __pte_alloc+0x20a/0x350 [ 3192.270852][ T2815] ? pmd_install+0x260/0x260 [ 3192.275278][ T2815] ? __kasan_check_read+0x11/0x20 [ 3192.280151][ T2815] ? hugepage_vma_check+0x182/0x4f0 [ 3192.280185][ T2815] __folio_alloc+0x15/0x40 [ 3192.280214][ T2815] handle_mm_fault+0x1fb0/0x2f40 [ 3192.280241][ T2815] ? numa_migrate_prep+0xe0/0xe0 [ 3192.280263][ T2815] ? follow_page_mask+0x518/0x1070 [ 3192.280296][ T2815] ? follow_page+0x250/0x250 [ 3192.280327][ T2815] __get_user_pages+0x377/0xf20 [ 3192.280360][ T2815] ? populate_vma_page_range+0x120/0x120 [ 3192.280390][ T2815] __mm_populate+0x375/0x570 [ 3192.280423][ T2815] ? do_mlock+0x680/0x680 [ 3192.280447][ T2815] ? check_vma_flags+0x2d0/0x2d0 [ 3192.280478][ T2815] do_mlock+0x57a/0x680 [ 3192.280503][ T2815] ? lru_gen_update_size+0x580/0x580 [ 3192.280529][ T2815] ? debug_smp_processor_id+0x17/0x20 [ 3192.280558][ T2815] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3192.280585][ T2815] __x64_sys_mlock2+0xb8/0xe0 [ 3192.280612][ T2815] do_syscall_64+0x3d/0xb0 [ 3192.280638][ T2815] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3192.367070][ T2815] RIP: 0033:0x7f3e4807cae9 [ 3192.367098][ T2815] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 23:38:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400010000000000000000000000ffff7f000001e9b5bf514860259449cce309d16e5c"], 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xe0d8758ec8b6737b}, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) (async) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) (async) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) syz_io_uring_setup(0x6773, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x7792, &(0x7f0000000240), &(0x7f00000002c0), 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) 23:38:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000600)={'gretap0\x00', &(0x7f00000005c0)={'tunl0\x00', r2, 0x8000, 0x7800, 0xf904, 0x0, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x80, 0x0, 0x80, 0x29, 0x0, @loopback, @empty}}}}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) io_submit(0x0, 0x5, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x10bd, r0, &(0x7f0000000040)="14bce0f31aa20a7c353d75676cc431edf83dd73c667bffb73e7bb7390dc97816a5286d80121de6143e30fc4972ddff6bcebf0ce7ae352b2c6196b39045184b5a", 0x40, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfff, r3, &(0x7f0000000140)="5013e9a7d7b7407d7b22759478275c00ddef55f441ae837a8248a2b1a8d37adcb9ce6667ef78a9fe079619345fedcfebfda4e84051493545810b71a57c169e808d1047b7b2e211f2c34d81", 0x4b, 0x0, 0x0, 0x1, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9, r5, &(0x7f0000000280)="ec6db4a53635715b083a06685de6b27abef3976bb12357ec1e8d02850aab0c09d6818aae9f0d5c78fb2a44069b19f8227188c7b592c2386ea5b3325263c84ab34c3d408748351cde2c0499dea9541db30726b7db713e62bf3913", 0x5a, 0x7ff, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x2, r6, &(0x7f0000000340)="d99f9e77f05ecce43d228cb2c5616042fe52f1a8751e45c88e557a471fd0b8bda9d99c84111d770c744d57a08e4fbd916de9626d47128c059290d73ceaea7068b62c28c55d46fac3ad10e596727b795484c57b70af21680e55b524d5149c4983c7af256c6b95fb68de2da7bfaec46d87909c99126addadb8cc3d3391d5f2349a02ca068debd29ee0668106bcfc35061892ff95a00289257d388d80e7b130e138a71327387c0b75a709f6a3d7a93eba236352f898627d92483f", 0xb9, 0x2, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000440)="6bae0043eaef2ff8e2b14c8f67a7585c19cf0654709dc7903f889c86916ff21a2ee9b9d982d59bba0e8ee5ea505550ce5e0c2e75aa9f3544b416fd636fd7261ded320ed4d53781ba85db16bc046924bde80f9d324814b380fc5ea2d9b327752ee8780ff31dd4c8c51d6dea4dd766b5c16c9922d7aa06b8fa63583ff1e66b417add64fe59a8c2", 0x86, 0x1, 0x0, 0x2}]) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 23:38:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x26801) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) [ 3192.390852][ T2815] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3192.399088][ T2815] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 [ 3192.399108][ T2815] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 3192.399128][ T2815] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3192.399141][ T2815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3192.399154][ T2815] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3192.399174][ T2815] [ 3192.399182][ T2821] CPU: 0 PID: 2821 Comm: syz-executor.4 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3192.399208][ T2821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3192.399222][ T2821] Call Trace: [ 3192.399229][ T2821] [ 3192.399237][ T2821] dump_stack_lvl+0x151/0x1b7 [ 3192.399268][ T2821] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3192.399294][ T2821] ? __alloc_pages+0x3a1/0x780 [ 3192.399324][ T2821] dump_stack+0x15/0x18 [ 3192.399345][ T2821] should_fail_ex+0x3d0/0x520 [ 3192.399370][ T2821] ? getname_flags+0xba/0x520 23:38:19 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 11) 23:38:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x89080) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:38:19 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (fail_nth: 2) 23:38:19 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0xfffffffffffffd8a) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0xfffffffffffffd8a) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) (async) 23:38:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x89080) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 3192.495800][ T2821] __should_failslab+0xaf/0xf0 [ 3192.495841][ T2821] should_failslab+0x9/0x20 [ 3192.495860][ T2821] kmem_cache_alloc+0x3b/0x2c0 [ 3192.495887][ T2821] getname_flags+0xba/0x520 [ 3192.495912][ T2821] getname+0x19/0x20 [ 3192.495932][ T2821] do_sys_openat2+0xd7/0x850 [ 3192.495949][ T2821] ? __kasan_check_write+0x14/0x20 23:38:19 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x89080) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:38:19 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (fail_nth: 3) 23:38:19 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 12) [ 3192.495971][ T2821] ? mutex_unlock+0xb2/0x260 [ 3192.495995][ T2821] ? bit_wait_io_timeout+0x120/0x120 [ 3192.496018][ T2821] ? do_sys_open+0x220/0x220 [ 3192.496037][ T2821] ? __kasan_check_write+0x14/0x20 [ 3192.496061][ T2821] __x64_sys_openat+0x243/0x290 [ 3192.496079][ T2821] ? __ia32_sys_open+0x270/0x270 [ 3192.496096][ T2821] ? debug_smp_processor_id+0x17/0x20 [ 3192.496122][ T2821] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3192.496150][ T2821] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3192.496173][ T2821] do_syscall_64+0x3d/0xb0 [ 3192.496194][ T2821] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3192.496214][ T2821] RIP: 0033:0x7f604867b6e0 [ 3192.496230][ T2821] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 09 82 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 5c 82 02 00 8b 44 [ 3192.496245][ T2821] RSP: 002b:00007f6049418c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3192.496266][ T2821] RAX: ffffffffffffffda RBX: 0000000000533302 RCX: 00007f604867b6e0 [ 3192.496279][ T2821] RDX: 0000000000533302 RSI: 00007f6049418ca0 RDI: 00000000ffffff9c [ 3192.496292][ T2821] RBP: 00007f6049418ca0 R08: 0000000000000000 R09: 00236e6f6d627375 [ 3192.496304][ T2821] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3192.496315][ T2821] R13: 000000000000000b R14: 00007f604879bf80 R15: 00007ffd43fd0de8 [ 3192.496331][ T2821] [ 3192.536458][ T2859] FAULT_INJECTION: forcing a failure. [ 3192.536458][ T2859] name fail_page_alloc, interval 1, probability 0, space 0, times 0 23:38:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000600)={'gretap0\x00', &(0x7f00000005c0)={'tunl0\x00', r2, 0x8000, 0x7800, 0xf904, 0x0, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x80, 0x0, 0x80, 0x29, 0x0, @loopback, @empty}}}}) pipe2$9p(&(0x7f0000000100), 0x80000) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) io_submit(0x0, 0x5, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x10bd, r0, &(0x7f0000000040)="14bce0f31aa20a7c353d75676cc431edf83dd73c667bffb73e7bb7390dc97816a5286d80121de6143e30fc4972ddff6bcebf0ce7ae352b2c6196b39045184b5a", 0x40, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfff, r3, &(0x7f0000000140)="5013e9a7d7b7407d7b22759478275c00ddef55f441ae837a8248a2b1a8d37adcb9ce6667ef78a9fe079619345fedcfebfda4e84051493545810b71a57c169e808d1047b7b2e211f2c34d81", 0x4b, 0x0, 0x0, 0x1, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9, r5, &(0x7f0000000280)="ec6db4a53635715b083a06685de6b27abef3976bb12357ec1e8d02850aab0c09d6818aae9f0d5c78fb2a44069b19f8227188c7b592c2386ea5b3325263c84ab34c3d408748351cde2c0499dea9541db30726b7db713e62bf3913", 0x5a, 0x7ff, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x2, r6, &(0x7f0000000340)="d99f9e77f05ecce43d228cb2c5616042fe52f1a8751e45c88e557a471fd0b8bda9d99c84111d770c744d57a08e4fbd916de9626d47128c059290d73ceaea7068b62c28c55d46fac3ad10e596727b795484c57b70af21680e55b524d5149c4983c7af256c6b95fb68de2da7bfaec46d87909c99126addadb8cc3d3391d5f2349a02ca068debd29ee0668106bcfc35061892ff95a00289257d388d80e7b130e138a71327387c0b75a709f6a3d7a93eba236352f898627d92483f", 0xb9, 0x2, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000440)="6bae0043eaef2ff8e2b14c8f67a7585c19cf0654709dc7903f889c86916ff21a2ee9b9d982d59bba0e8ee5ea505550ce5e0c2e75aa9f3544b416fd636fd7261ded320ed4d53781ba85db16bc046924bde80f9d324814b380fc5ea2d9b327752ee8780ff31dd4c8c51d6dea4dd766b5c16c9922d7aa06b8fa63583ff1e66b417add64fe59a8c2", 0x86, 0x1, 0x0, 0x2}]) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) [ 3192.536494][ T2859] CPU: 0 PID: 2859 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3192.536520][ T2859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3192.536534][ T2859] Call Trace: [ 3192.536542][ T2859] [ 3192.536550][ T2859] dump_stack_lvl+0x151/0x1b7 [ 3192.536583][ T2859] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3192.536614][ T2859] dump_stack+0x15/0x18 [ 3192.536637][ T2859] should_fail_ex+0x3d0/0x520 [ 3192.536663][ T2859] should_fail_alloc_page+0x68/0x90 [ 3192.536694][ T2859] __alloc_pages+0x1f4/0x780 [ 3192.536725][ T2859] ? __this_cpu_preempt_check+0x13/0x20 [ 3192.536756][ T2859] ? prep_new_page+0x110/0x110 [ 3192.536786][ T2859] ? __kasan_check_write+0x14/0x20 [ 3192.536813][ T2859] ? _raw_spin_lock+0xa4/0x1b0 [ 3192.536832][ T2859] ? _raw_spin_trylock_bh+0x190/0x190 [ 3192.536853][ T2859] __folio_alloc+0x15/0x40 [ 3192.536881][ T2859] handle_mm_fault+0x1fb0/0x2f40 [ 3192.536903][ T2859] ? _raw_spin_unlock+0x4c/0x70 [ 3192.536929][ T2859] ? numa_migrate_prep+0xe0/0xe0 [ 3192.536952][ T2859] ? follow_page_mask+0x94f/0x1070 [ 3192.536986][ T2859] ? follow_page+0x250/0x250 [ 3192.537018][ T2859] __get_user_pages+0x377/0xf20 [ 3192.537063][ T2859] ? populate_vma_page_range+0x120/0x120 [ 3192.537099][ T2859] __mm_populate+0x375/0x570 [ 3192.537134][ T2859] ? do_mlock+0x680/0x680 [ 3192.537160][ T2859] ? check_vma_flags+0x2d0/0x2d0 [ 3192.537194][ T2859] do_mlock+0x57a/0x680 [ 3192.537221][ T2859] ? lru_gen_update_size+0x580/0x580 [ 3192.537249][ T2859] ? debug_smp_processor_id+0x17/0x20 [ 3192.537278][ T2859] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3192.537305][ T2859] __x64_sys_mlock2+0xb8/0xe0 [ 3192.537329][ T2859] do_syscall_64+0x3d/0xb0 [ 3192.537352][ T2859] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3192.537375][ T2859] RIP: 0033:0x7f3e4807cae9 [ 3192.537394][ T2859] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3192.537416][ T2859] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3192.537441][ T2859] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 [ 3192.537458][ T2859] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 3192.537472][ T2859] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3192.537488][ T2859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3192.537502][ T2859] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3192.537522][ T2859] [ 3192.541098][ T2864] FAULT_INJECTION: forcing a failure. [ 3192.541098][ T2864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3192.543307][ T2864] CPU: 1 PID: 2864 Comm: syz-executor.4 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3192.543344][ T2864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3192.543359][ T2864] Call Trace: [ 3192.543366][ T2864] [ 3192.543374][ T2864] dump_stack_lvl+0x151/0x1b7 [ 3192.543408][ T2864] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3192.543436][ T2864] ? getname_flags+0xba/0x520 [ 3192.543466][ T2864] dump_stack+0x15/0x18 [ 3192.543489][ T2864] should_fail_ex+0x3d0/0x520 [ 3192.543514][ T2864] should_fail+0xb/0x10 [ 3192.543543][ T2864] should_fail_usercopy+0x1a/0x20 [ 3192.543567][ T2864] strncpy_from_user+0x24/0x2b0 [ 3192.543601][ T2864] ? getname_flags+0xba/0x520 [ 3192.543629][ T2864] getname_flags+0xf2/0x520 [ 3192.543658][ T2864] getname+0x19/0x20 [ 3192.543683][ T2864] do_sys_openat2+0xd7/0x850 [ 3192.543704][ T2864] ? __kasan_check_write+0x14/0x20 [ 3192.543733][ T2864] ? mutex_unlock+0xb2/0x260 [ 3192.543760][ T2864] ? bit_wait_io_timeout+0x120/0x120 [ 3192.543788][ T2864] ? do_sys_open+0x220/0x220 [ 3192.543810][ T2864] ? __kasan_check_write+0x14/0x20 [ 3192.543841][ T2864] __x64_sys_openat+0x243/0x290 [ 3192.543862][ T2864] ? __ia32_sys_open+0x270/0x270 [ 3192.543884][ T2864] ? debug_smp_processor_id+0x17/0x20 [ 3192.543914][ T2864] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3192.543941][ T2864] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3192.543968][ T2864] do_syscall_64+0x3d/0xb0 [ 3192.543993][ T2864] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3192.544017][ T2864] RIP: 0033:0x7f604867b6e0 [ 3192.544035][ T2864] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 09 82 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 5c 82 02 00 8b 44 [ 3192.544055][ T2864] RSP: 002b:00007f6049418c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3192.544077][ T2864] RAX: ffffffffffffffda RBX: 0000000000533302 RCX: 00007f604867b6e0 [ 3192.544092][ T2864] RDX: 0000000000533302 RSI: 00007f6049418ca0 RDI: 00000000ffffff9c [ 3192.544108][ T2864] RBP: 00007f6049418ca0 R08: 0000000000000000 R09: 00236e6f6d627375 [ 3192.544123][ T2864] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3192.544138][ T2864] R13: 000000000000000b R14: 00007f604879bf80 R15: 00007ffd43fd0de8 [ 3192.544160][ T2864] [ 3192.568325][ T2871] FAULT_INJECTION: forcing a failure. [ 3192.568325][ T2871] name failslab, interval 1, probability 0, space 0, times 0 [ 3192.570580][ T2868] FAULT_INJECTION: forcing a failure. [ 3192.570580][ T2868] name failslab, interval 1, probability 0, space 0, times 0 [ 3192.578306][ T2871] CPU: 1 PID: 2871 Comm: syz-executor.4 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3193.198147][ T2871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3193.198172][ T2871] Call Trace: [ 3193.198181][ T2871] [ 3193.198192][ T2871] dump_stack_lvl+0x151/0x1b7 [ 3193.198229][ T2871] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3193.198253][ T2871] ? kernel_text_address+0xa9/0xe0 [ 3193.198285][ T2871] ? __kernel_text_address+0xd/0x40 [ 3193.198315][ T2871] dump_stack+0x15/0x18 [ 3193.198334][ T2871] should_fail_ex+0x3d0/0x520 [ 3193.198354][ T2871] ? __alloc_file+0x29/0x2a0 [ 3193.198381][ T2871] __should_failslab+0xaf/0xf0 [ 3193.198408][ T2871] should_failslab+0x9/0x20 [ 3193.198426][ T2871] kmem_cache_alloc+0x3b/0x2c0 [ 3193.198451][ T2871] ? _parse_integer_limit+0x19b/0x1e0 [ 3193.198471][ T2871] __alloc_file+0x29/0x2a0 [ 3193.198502][ T2871] alloc_empty_file+0x95/0x180 [ 3193.198528][ T2871] path_openat+0xec/0x2d60 [ 3193.198552][ T2871] ? kasan_set_track+0x60/0x70 [ 3193.198571][ T2871] ? kasan_set_track+0x4b/0x70 [ 3193.198588][ T2871] ? kasan_save_alloc_info+0x1f/0x30 [ 3193.198610][ T2871] ? __kasan_slab_alloc+0x6c/0x80 [ 3193.198628][ T2871] ? slab_post_alloc_hook+0x53/0x2c0 [ 3193.198654][ T2871] ? getname_flags+0xba/0x520 [ 3193.198676][ T2871] ? getname+0x19/0x20 [ 3193.198696][ T2871] ? do_sys_openat2+0xd7/0x850 [ 3193.198713][ T2871] ? __x64_sys_openat+0x243/0x290 [ 3193.198736][ T2871] ? do_filp_open+0x480/0x480 [ 3193.198763][ T2871] do_filp_open+0x230/0x480 [ 3193.198787][ T2871] ? vfs_tmpfile+0x480/0x480 [ 3193.198816][ T2871] ? alloc_fd+0x4fa/0x5a0 [ 3193.198838][ T2871] do_sys_openat2+0x13f/0x850 [ 3193.198855][ T2871] ? __kasan_check_write+0x14/0x20 [ 3193.198879][ T2871] ? mutex_unlock+0xb2/0x260 [ 3193.198902][ T2871] ? bit_wait_io_timeout+0x120/0x120 [ 3193.198926][ T2871] ? do_sys_open+0x220/0x220 [ 3193.198944][ T2871] ? __kasan_check_write+0x14/0x20 [ 3193.198969][ T2871] __x64_sys_openat+0x243/0x290 [ 3193.198988][ T2871] ? __ia32_sys_open+0x270/0x270 [ 3193.199006][ T2871] ? debug_smp_processor_id+0x17/0x20 [ 3193.199032][ T2871] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3193.199055][ T2871] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3193.199077][ T2871] do_syscall_64+0x3d/0xb0 [ 3193.199098][ T2871] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3193.199119][ T2871] RIP: 0033:0x7f604867b6e0 [ 3193.199137][ T2871] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 09 82 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 5c 82 02 00 8b 44 [ 3193.199154][ T2871] RSP: 002b:00007f6049418c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3193.199177][ T2871] RAX: ffffffffffffffda RBX: 0000000000533302 RCX: 00007f604867b6e0 [ 3193.199191][ T2871] RDX: 0000000000533302 RSI: 00007f6049418ca0 RDI: 00000000ffffff9c [ 3193.199204][ T2871] RBP: 00007f6049418ca0 R08: 0000000000000000 R09: 00236e6f6d627375 [ 3193.199217][ T2871] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3193.199228][ T2871] R13: 000000000000000b R14: 00007f604879bf80 R15: 00007ffd43fd0de8 [ 3193.199244][ T2871] [ 3193.210538][ T2868] CPU: 1 PID: 2868 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3193.210576][ T2868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3193.210589][ T2868] Call Trace: [ 3193.210595][ T2868] [ 3193.210603][ T2868] dump_stack_lvl+0x151/0x1b7 [ 3193.210642][ T2868] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3193.210672][ T2868] dump_stack+0x15/0x18 [ 3193.210697][ T2868] should_fail_ex+0x3d0/0x520 [ 3193.210723][ T2868] ? __anon_vma_prepare+0x51/0x420 [ 3193.210745][ T2868] __should_failslab+0xaf/0xf0 [ 3193.210778][ T2868] should_failslab+0x9/0x20 [ 3193.210802][ T2868] kmem_cache_alloc+0x3b/0x2c0 [ 3193.210832][ T2868] __anon_vma_prepare+0x51/0x420 [ 3193.210868][ T2868] do_fault+0x1579/0x1820 [ 3193.210894][ T2868] ? pte_marker_clear+0x2f0/0x2f0 [ 3193.210917][ T2868] ? _raw_spin_lock+0xa4/0x1b0 [ 3193.210939][ T2868] ? _raw_spin_trylock_bh+0x190/0x190 [ 3193.210962][ T2868] handle_mm_fault+0x184a/0x2f40 [ 3193.210984][ T2868] ? _raw_spin_unlock+0x4c/0x70 [ 3193.211009][ T2868] ? numa_migrate_prep+0xe0/0xe0 [ 3193.211032][ T2868] ? follow_page_mask+0x94f/0x1070 [ 3193.211068][ T2868] ? follow_page+0x250/0x250 [ 3193.211103][ T2868] __get_user_pages+0x377/0xf20 [ 3193.211140][ T2868] ? populate_vma_page_range+0x120/0x120 [ 3193.211175][ T2868] ? mlock_page_drain_local+0x108/0x180 [ 3193.211204][ T2868] __mm_populate+0x375/0x570 [ 3193.211237][ T2868] ? do_mlock+0x680/0x680 [ 3193.211265][ T2868] ? check_vma_flags+0x2d0/0x2d0 [ 3193.211302][ T2868] do_mlock+0x57a/0x680 [ 3193.211330][ T2868] ? lru_gen_update_size+0x580/0x580 [ 3193.211361][ T2868] ? debug_smp_processor_id+0x17/0x20 [ 3193.211394][ T2868] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3193.211425][ T2868] __x64_sys_mlock2+0xb8/0xe0 [ 3193.211451][ T2868] do_syscall_64+0x3d/0xb0 [ 3193.211477][ T2868] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3193.211513][ T2868] RIP: 0033:0x7f3e4807cae9 [ 3193.211537][ T2868] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3193.211559][ T2868] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3193.211585][ T2868] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 [ 3193.211603][ T2868] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 23:38:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400010000000000000000000000ffff7f000001e9b5bf514860259449cce309d16e5c"], 0x28}}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400010000000000000000000000ffff7f000001e9b5bf514860259449cce309d16e5c"], 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xe0d8758ec8b6737b}, 0x0) (async) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xe0d8758ec8b6737b}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) syz_io_uring_setup(0x6773, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x7792, &(0x7f0000000240), &(0x7f00000002c0), 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) 23:38:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2], 0x104}, 0x1, 0x0, 0x0, 0x20040010}, 0x9000) syz_open_dev$usbmon(&(0x7f0000000280), 0x9, 0x60a341) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) mmap$usbmon(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x3000003, 0x10010, r3, 0x80000000) 23:38:20 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (fail_nth: 4) 23:38:20 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 13) 23:38:20 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0xfffffffffffffd8a) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) 23:38:20 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000600)={'gretap0\x00', &(0x7f00000005c0)={'tunl0\x00', r2, 0x8000, 0x7800, 0xf904, 0x0, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x80, 0x0, 0x80, 0x29, 0x0, @loopback, @empty}}}}) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, 0x0) (async) io_submit(0x0, 0x5, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x10bd, r0, &(0x7f0000000040)="14bce0f31aa20a7c353d75676cc431edf83dd73c667bffb73e7bb7390dc97816a5286d80121de6143e30fc4972ddff6bcebf0ce7ae352b2c6196b39045184b5a", 0x40, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xfff, r3, &(0x7f0000000140)="5013e9a7d7b7407d7b22759478275c00ddef55f441ae837a8248a2b1a8d37adcb9ce6667ef78a9fe079619345fedcfebfda4e84051493545810b71a57c169e808d1047b7b2e211f2c34d81", 0x4b, 0x0, 0x0, 0x1, r4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x9, r5, &(0x7f0000000280)="ec6db4a53635715b083a06685de6b27abef3976bb12357ec1e8d02850aab0c09d6818aae9f0d5c78fb2a44069b19f8227188c7b592c2386ea5b3325263c84ab34c3d408748351cde2c0499dea9541db30726b7db713e62bf3913", 0x5a, 0x7ff, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x2, r6, &(0x7f0000000340)="d99f9e77f05ecce43d228cb2c5616042fe52f1a8751e45c88e557a471fd0b8bda9d99c84111d770c744d57a08e4fbd916de9626d47128c059290d73ceaea7068b62c28c55d46fac3ad10e596727b795484c57b70af21680e55b524d5149c4983c7af256c6b95fb68de2da7bfaec46d87909c99126addadb8cc3d3391d5f2349a02ca068debd29ee0668106bcfc35061892ff95a00289257d388d80e7b130e138a71327387c0b75a709f6a3d7a93eba236352f898627d92483f", 0xb9, 0x2, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000440)="6bae0043eaef2ff8e2b14c8f67a7585c19cf0654709dc7903f889c86916ff21a2ee9b9d982d59bba0e8ee5ea505550ce5e0c2e75aa9f3544b416fd636fd7261ded320ed4d53781ba85db16bc046924bde80f9d324814b380fc5ea2d9b327752ee8780ff31dd4c8c51d6dea4dd766b5c16c9922d7aa06b8fa63583ff1e66b417add64fe59a8c2", 0x86, 0x1, 0x0, 0x2}]) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 23:38:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2], 0x104}, 0x1, 0x0, 0x0, 0x20040010}, 0x9000) (async) syz_open_dev$usbmon(&(0x7f0000000280), 0x9, 0x60a341) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) mmap$usbmon(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x3000003, 0x10010, r3, 0x80000000) [ 3193.211618][ T2868] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3193.211634][ T2868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3193.211649][ T2868] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3193.211670][ T2868] [ 3193.746120][ T2887] FAULT_INJECTION: forcing a failure. [ 3193.746120][ T2887] name failslab, interval 1, probability 0, space 0, times 0 [ 3193.759490][ T2888] FAULT_INJECTION: forcing a failure. [ 3193.759490][ T2888] name failslab, interval 1, probability 0, space 0, times 0 [ 3193.763505][ T2887] CPU: 1 PID: 2887 Comm: syz-executor.4 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3193.781821][ T2887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3193.791713][ T2887] Call Trace: [ 3193.794828][ T2887] [ 3193.797606][ T2887] dump_stack_lvl+0x151/0x1b7 [ 3193.802122][ T2887] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3193.807419][ T2887] dump_stack+0x15/0x18 [ 3193.811410][ T2887] should_fail_ex+0x3d0/0x520 [ 3193.816008][ T2887] ? security_file_alloc+0x29/0x120 [ 3193.821060][ T2887] __should_failslab+0xaf/0xf0 [ 3193.825656][ T2887] should_failslab+0x9/0x20 [ 3193.829992][ T2887] kmem_cache_alloc+0x3b/0x2c0 [ 3193.834592][ T2887] ? __alloc_file+0x29/0x2a0 [ 3193.839013][ T2887] security_file_alloc+0x29/0x120 [ 3193.843879][ T2887] __alloc_file+0xb2/0x2a0 [ 3193.848118][ T2887] alloc_empty_file+0x95/0x180 23:38:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "0575871dae0699b2f1439cae18454523c3594953d6b6b0fb77556dc043ee014c", 0x401, 0x5, 0x0, 0x100}, 0x3c) [ 3193.852720][ T2887] path_openat+0xec/0x2d60 [ 3193.856974][ T2887] ? kasan_set_track+0x60/0x70 [ 3193.861571][ T2887] ? kasan_set_track+0x4b/0x70 [ 3193.866183][ T2887] ? kasan_save_alloc_info+0x1f/0x30 [ 3193.871294][ T2887] ? __kasan_slab_alloc+0x6c/0x80 [ 3193.876152][ T2887] ? slab_post_alloc_hook+0x53/0x2c0 [ 3193.881296][ T2887] ? getname_flags+0xba/0x520 [ 3193.885795][ T2887] ? getname+0x19/0x20 [ 3193.889697][ T2887] ? do_sys_openat2+0xd7/0x850 [ 3193.894297][ T2887] ? __x64_sys_openat+0x243/0x290 [ 3193.899164][ T2887] ? do_filp_open+0x480/0x480 [ 3193.903679][ T2887] do_filp_open+0x230/0x480 [ 3193.908007][ T2887] ? vfs_tmpfile+0x480/0x480 [ 3193.912439][ T2887] ? alloc_fd+0x4fa/0x5a0 [ 3193.916602][ T2887] do_sys_openat2+0x13f/0x850 [ 3193.921116][ T2887] ? __kasan_check_write+0x14/0x20 [ 3193.926058][ T2887] ? mutex_unlock+0xb2/0x260 [ 3193.930484][ T2887] ? bit_wait_io_timeout+0x120/0x120 [ 3193.935605][ T2887] ? do_sys_open+0x220/0x220 [ 3193.940038][ T2887] ? __kasan_check_write+0x14/0x20 [ 3193.944986][ T2887] __x64_sys_openat+0x243/0x290 [ 3193.949667][ T2887] ? __ia32_sys_open+0x270/0x270 23:38:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "0575871dae0699b2f1439cae18454523c3594953d6b6b0fb77556dc043ee014c", 0x401, 0x5, 0x0, 0x100}, 0x3c) [ 3193.954446][ T2887] ? debug_smp_processor_id+0x17/0x20 [ 3193.959646][ T2887] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3193.965548][ T2887] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3193.971018][ T2887] do_syscall_64+0x3d/0xb0 [ 3193.975274][ T2887] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3193.981004][ T2887] RIP: 0033:0x7f604867b6e0 [ 3193.985252][ T2887] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 09 82 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 5c 82 02 00 8b 44 [ 3194.004699][ T2887] RSP: 002b:00007f6049418c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3194.012943][ T2887] RAX: ffffffffffffffda RBX: 0000000000533302 RCX: 00007f604867b6e0 [ 3194.020754][ T2887] RDX: 0000000000533302 RSI: 00007f6049418ca0 RDI: 00000000ffffff9c [ 3194.028563][ T2887] RBP: 00007f6049418ca0 R08: 0000000000000000 R09: 00236e6f6d627375 [ 3194.036720][ T2887] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3194.044531][ T2887] R13: 000000000000000b R14: 00007f604879bf80 R15: 00007ffd43fd0de8 [ 3194.052433][ T2887] [ 3194.055320][ T2888] CPU: 0 PID: 2888 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3194.065194][ T2888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3194.075174][ T2888] Call Trace: [ 3194.078389][ T2888] [ 3194.081167][ T2888] dump_stack_lvl+0x151/0x1b7 [ 3194.085686][ T2888] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3194.090986][ T2888] ? mas_prev+0x21f/0x3f0 [ 3194.095143][ T2888] dump_stack+0x15/0x18 [ 3194.099137][ T2888] should_fail_ex+0x3d0/0x520 23:38:21 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x20004000) [ 3194.103647][ T2888] ? __anon_vma_prepare+0x9b/0x420 [ 3194.108593][ T2888] __should_failslab+0xaf/0xf0 [ 3194.113198][ T2888] should_failslab+0x9/0x20 [ 3194.117536][ T2888] kmem_cache_alloc+0x3b/0x2c0 [ 3194.122130][ T2888] ? __anon_vma_prepare+0x51/0x420 [ 3194.127080][ T2888] __anon_vma_prepare+0x9b/0x420 [ 3194.131862][ T2888] do_fault+0x1579/0x1820 [ 3194.136024][ T2888] ? pte_marker_clear+0x2f0/0x2f0 [ 3194.140878][ T2888] ? _raw_spin_lock+0xa4/0x1b0 [ 3194.145482][ T2888] ? _raw_spin_trylock_bh+0x190/0x190 [ 3194.150690][ T2888] handle_mm_fault+0x184a/0x2f40 23:38:21 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="6572738a616e30000000000000000000a9267f382301be12dafe5cadf5178ffad3c19fc8acb4e1ebd6b5b618aa093ce944226a2b402f5ee8c475f598c55b9750", @ANYRES32=0x0, @ANYBLOB="00087800000000090000008141b20044006600007f2f90780a0101000a0101010189171cac1414bb00000000e0000002ac1414aae0000002861700000002070d5b02fe0b3ca867440074c90204ef4500"]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r6, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="7800001000000200000000074a79002800680000052f9078ac141444ac1e00018313c70000000000000000ac14140c7f00000100"]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r9, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x90) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000200)={0x528, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xaaaa}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0xe0, 0x8, 0x401}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r6}, {0xd0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xdd, 0x5, 0x2, 0x7807}, {0x1, 0x3f, 0x1f}, {0x9, 0x3f, 0x1f, 0x8000}, {0x0, 0x8, 0x1, 0x1}, {0x8001, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc00000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x528}, 0x1, 0x0, 0x0, 0x44018}, 0x24008840) r12 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb0, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40c1}, 0xc010) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3002, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r12, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ff4000/0x4000)=nil, 0x4000}}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, 0x0) ioctl$UFFDIO_ZEROPAGE(r13, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) 23:38:21 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x20004000) 23:38:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2], 0x104}, 0x1, 0x0, 0x0, 0x20040010}, 0x9000) syz_open_dev$usbmon(&(0x7f0000000280), 0x9, 0x60a341) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) mmap$usbmon(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x3000003, 0x10010, r3, 0x80000000) 23:38:21 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (fail_nth: 5) [ 3194.155464][ T2888] ? _raw_spin_unlock+0x4c/0x70 [ 3194.160150][ T2888] ? numa_migrate_prep+0xe0/0xe0 [ 3194.164932][ T2888] ? follow_page_mask+0x94f/0x1070 [ 3194.169874][ T2888] ? follow_page+0x250/0x250 [ 3194.174298][ T2888] __get_user_pages+0x377/0xf20 [ 3194.178989][ T2888] ? populate_vma_page_range+0x120/0x120 [ 3194.184453][ T2888] ? mlock_page_drain_local+0x108/0x180 [ 3194.189836][ T2888] __mm_populate+0x375/0x570 [ 3194.194262][ T2888] ? do_mlock+0x680/0x680 [ 3194.198433][ T2888] ? check_vma_flags+0x2d0/0x2d0 23:38:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "0575871dae0699b2f1439cae18454523c3594953d6b6b0fb77556dc043ee014c", 0x401, 0x5, 0x0, 0x100}, 0x3c) 23:38:21 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 14) 23:38:21 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x20004000) 23:38:21 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (fail_nth: 15) 23:38:21 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (fail_nth: 6) 23:38:21 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) [ 3194.203207][ T2888] do_mlock+0x57a/0x680 [ 3194.203253][ T2888] ? lru_gen_update_size+0x580/0x580 [ 3194.203285][ T2888] ? debug_smp_processor_id+0x17/0x20 [ 3194.203318][ T2888] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3194.203355][ T2888] __x64_sys_mlock2+0xb8/0xe0 [ 3194.203383][ T2888] do_syscall_64+0x3d/0xb0 [ 3194.203411][ T2888] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3194.203436][ T2888] RIP: 0033:0x7f3e4807cae9 [ 3194.203457][ T2888] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 23:38:21 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x2f2bf62f) 23:38:21 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x2f2bf62f) [ 3194.203477][ T2888] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3194.203503][ T2888] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 [ 3194.203520][ T2888] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 3194.203534][ T2888] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3194.203548][ T2888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3194.203562][ T2888] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3194.203582][ T2888] [ 3194.226215][ T2926] FAULT_INJECTION: forcing a failure. [ 3194.226215][ T2926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3194.226252][ T2926] CPU: 1 PID: 2926 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3194.226278][ T2926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3194.226293][ T2926] Call Trace: [ 3194.226300][ T2926] [ 3194.226308][ T2926] dump_stack_lvl+0x151/0x1b7 [ 3194.226343][ T2926] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3194.226374][ T2926] dump_stack+0x15/0x18 [ 3194.226398][ T2926] should_fail_ex+0x3d0/0x520 [ 3194.226425][ T2926] should_fail_alloc_page+0x68/0x90 [ 3194.226456][ T2926] __alloc_pages+0x1f4/0x780 [ 3194.226487][ T2926] ? prep_new_page+0x110/0x110 [ 3194.226517][ T2926] ? up_write+0x79/0x1f0 [ 3194.226541][ T2926] ? __anon_vma_prepare+0x39c/0x420 [ 3194.226565][ T2926] __folio_alloc+0x15/0x40 [ 3194.226595][ T2926] do_fault+0x3fd/0x1820 [ 3194.226621][ T2926] ? pte_marker_clear+0x2f0/0x2f0 [ 3194.226644][ T2926] ? _raw_spin_lock+0xa4/0x1b0 [ 3194.226665][ T2926] ? _raw_spin_trylock_bh+0x190/0x190 [ 3194.226688][ T2926] handle_mm_fault+0x184a/0x2f40 [ 3194.226711][ T2926] ? _raw_spin_unlock+0x4c/0x70 [ 3194.226737][ T2926] ? numa_migrate_prep+0xe0/0xe0 [ 3194.226761][ T2926] ? follow_page_mask+0x94f/0x1070 [ 3194.226796][ T2926] ? follow_page+0x250/0x250 [ 3194.226840][ T2926] __get_user_pages+0x377/0xf20 [ 3194.226878][ T2926] ? populate_vma_page_range+0x120/0x120 [ 3194.226912][ T2926] ? mlock_page_drain_local+0x108/0x180 [ 3194.226942][ T2926] __mm_populate+0x375/0x570 [ 3194.226973][ T2926] ? do_mlock+0x680/0x680 [ 3194.227001][ T2926] ? check_vma_flags+0x2d0/0x2d0 [ 3194.227036][ T2926] do_mlock+0x57a/0x680 [ 3194.227064][ T2926] ? lru_gen_update_size+0x580/0x580 [ 3194.227094][ T2926] ? debug_smp_processor_id+0x17/0x20 [ 3194.227124][ T2926] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3194.227152][ T2926] __x64_sys_mlock2+0xb8/0xe0 [ 3194.227180][ T2926] do_syscall_64+0x3d/0xb0 [ 3194.227206][ T2926] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3194.227229][ T2926] RIP: 0033:0x7f3e4807cae9 [ 3194.227249][ T2926] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3194.227270][ T2926] RSP: 002b:00007f3e48e7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000145 [ 3194.227296][ T2926] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807cae9 [ 3194.227313][ T2926] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 3194.227328][ T2926] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3194.227342][ T2926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3194.227356][ T2926] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3194.227376][ T2926] [ 3194.230649][ T2920] FAULT_INJECTION: forcing a failure. [ 3194.230649][ T2920] name failslab, interval 1, probability 0, space 0, times 0 [ 3194.230681][ T2920] CPU: 0 PID: 2920 Comm: syz-executor.4 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3194.230709][ T2920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3194.230722][ T2920] Call Trace: [ 3194.230730][ T2920] [ 3194.230738][ T2920] dump_stack_lvl+0x151/0x1b7 [ 3194.230773][ T2920] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3194.230806][ T2920] dump_stack+0x15/0x18 [ 3194.230831][ T2920] should_fail_ex+0x3d0/0x520 [ 3194.230859][ T2920] __should_failslab+0xaf/0xf0 [ 3194.230892][ T2920] should_failslab+0x9/0x20 [ 3194.230916][ T2920] slab_pre_alloc_hook+0x2e/0x1b0 [ 3194.230947][ T2920] ? memcpy+0x56/0x70 [ 3194.230974][ T2920] kmem_cache_alloc_lru+0x49/0x220 [ 3194.231004][ T2920] ? __d_alloc+0x34/0x700 [ 3194.231033][ T2920] __d_alloc+0x34/0x700 [ 3194.231059][ T2920] ? stack_trace_save+0x113/0x1c0 [ 3194.231096][ T2920] d_alloc_parallel+0xe1/0x1270 [ 3194.231130][ T2920] ? selinux_inode_follow_link+0x390/0x390 [ 3194.231161][ T2920] ? d_hash_and_lookup+0x1e0/0x1e0 [ 3194.231191][ T2920] ? down_read+0xa5a/0x10c0 [ 3194.231222][ T2920] ? lockref_mark_dead+0xb0/0xb0 [ 3194.231258][ T2920] __lookup_slow+0x154/0x3e0 [ 3194.231288][ T2920] ? lookup_one_len+0x2c0/0x2c0 [ 3194.231331][ T2920] lookup_slow+0x5a/0x80 [ 3194.231362][ T2920] walk_component+0x2e7/0x410 [ 3194.231385][ T2920] path_lookupat+0x16d/0x450 [ 3194.231415][ T2920] do_tmpfile+0xa1/0x330 [ 3194.231437][ T2920] ? may_open+0x440/0x440 [ 3194.231465][ T2920] path_openat+0x279b/0x2d60 [ 3194.231496][ T2920] ? kasan_set_track+0x60/0x70 [ 3194.231520][ T2920] ? kasan_set_track+0x4b/0x70 [ 3194.231542][ T2920] ? kasan_save_alloc_info+0x1f/0x30 [ 3194.231570][ T2920] ? __kasan_slab_alloc+0x6c/0x80 [ 3194.231592][ T2920] ? slab_post_alloc_hook+0x53/0x2c0 [ 3194.231624][ T2920] ? getname_flags+0xba/0x520 [ 3194.231650][ T2920] ? getname+0x19/0x20 [ 3194.231674][ T2920] ? __x64_sys_openat+0x243/0x290 [ 3194.231703][ T2920] ? do_filp_open+0x480/0x480 [ 3194.231736][ T2920] do_filp_open+0x230/0x480 [ 3194.231766][ T2920] ? vfs_tmpfile+0x480/0x480 [ 3194.231802][ T2920] ? alloc_fd+0x4fa/0x5a0 [ 3194.231830][ T2920] do_sys_openat2+0x13f/0x850 [ 3194.231851][ T2920] ? __kasan_check_write+0x14/0x20 [ 3194.231880][ T2920] ? mutex_unlock+0xb2/0x260 [ 3194.231909][ T2920] ? bit_wait_io_timeout+0x120/0x120 [ 3194.231938][ T2920] ? do_sys_open+0x220/0x220 [ 3194.231962][ T2920] ? __kasan_check_write+0x14/0x20 [ 3194.231993][ T2920] __x64_sys_openat+0x243/0x290 [ 3194.232016][ T2920] ? __ia32_sys_open+0x270/0x270 [ 3194.232039][ T2920] ? debug_smp_processor_id+0x17/0x20 [ 3194.232071][ T2920] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3194.232099][ T2920] ? exit_to_user_mode_prepare+0x39/0xa0 [ 3194.232126][ T2920] do_syscall_64+0x3d/0xb0 [ 3194.232152][ T2920] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3194.232176][ T2920] RIP: 0033:0x7f604867b6e0 [ 3194.232195][ T2920] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 09 82 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 5c 82 02 00 8b 44 [ 3194.232215][ T2920] RSP: 002b:00007f6049418c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3194.232240][ T2920] RAX: ffffffffffffffda RBX: 0000000000533302 RCX: 00007f604867b6e0 [ 3194.232257][ T2920] RDX: 0000000000533302 RSI: 00007f6049418ca0 RDI: 00000000ffffff9c [ 3194.232272][ T2920] RBP: 00007f6049418ca0 R08: 0000000000000000 R09: 00236e6f6d627375 [ 3194.232288][ T2920] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 3194.232303][ T2920] R13: 000000000000000b R14: 00007f604879bf80 R15: 00007ffd43fd0de8 [ 3194.232333][ T2920] [ 3194.265041][ T2941] FAULT_INJECTION: forcing a failure. [ 3194.265041][ T2941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3194.274789][ T2937] FAULT_INJECTION: forcing a failure. [ 3194.274789][ T2937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3194.277439][ T2941] CPU: 1 PID: 2941 Comm: syz-executor.5 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 23:38:22 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="6572738a616e30000000000000000000a9267f382301be12dafe5cadf5178ffad3c19fc8acb4e1ebd6b5b618aa093ce944226a2b402f5ee8c475f598c55b9750", @ANYRES32=0x0, @ANYBLOB="00087800000000090000008141b20044006600007f2f90780a0101000a0101010189171cac1414bb00000000e0000002ac1414aae0000002861700000002070d5b02fe0b3ca867440074c90204ef4500"]}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r6, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="7800001000000200000000074a79002800680000052f9078ac141444ac1e00018313c70000000000000000ac14140c7f00000100"]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r9, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x90) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000200)={0x528, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xaaaa}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0xe0, 0x8, 0x401}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r6}, {0xd0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xdd, 0x5, 0x2, 0x7807}, {0x1, 0x3f, 0x1f}, {0x9, 0x3f, 0x1f, 0x8000}, {0x0, 0x8, 0x1, 0x1}, {0x8001, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc00000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x528}, 0x1, 0x0, 0x0, 0x44018}, 0x24008840) (async) r12 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb0, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40c1}, 0xc010) (async) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3002, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r12, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ff4000/0x4000)=nil, 0x4000}}) (async) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r13, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) 23:38:22 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10010, r0, 0x2f2bf62f) 23:38:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f0000000680)={0xac8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0xa8c, 0x8, 0x0, 0x1, [{0x4c8, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0x2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x464, 0x9, 0x0, 0x1, [{0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x7}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}]}, {0x464, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x298, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private1, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b4a134639758fa1871beab05fb5ce64f617c70fe036c7f92c370fdb64c93fe3d"}, @WGPEER_A_ALLOWEDIPS={0x158, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2b2abbcc7c19b5e5b145def947e25233c50a37156efe266cca75ece6e4717bf7"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b1c575cc7289c548161c132b926ed543ac388c5fabacfeddada862f52ac54a75"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f196a50d375076ac0a8ab8af7ddc2110c1a05b6c6186ae5ad2f25096d17d87cc"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "da854a308715c03bfe7cfe1366f29d1f9f2d7bcdb13c7f741f66c4f8a349527b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xfffffbff, @local, 0xbefd}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0xac8}, 0x1, 0x0, 0x0, 0x800}, 0x800) 23:38:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) [ 3195.005164][ T2941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3195.005184][ T2941] Call Trace: [ 3195.005191][ T2941] [ 3195.005200][ T2941] dump_stack_lvl+0x151/0x1b7 [ 3195.005231][ T2941] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3195.005254][ T2941] ? follow_page_mask+0x94f/0x1070 [ 3195.005285][ T2941] dump_stack+0x15/0x18 [ 3195.005305][ T2941] should_fail_ex+0x3d0/0x520 [ 3195.005327][ T2941] should_fail+0xb/0x10 [ 3195.005344][ T2941] should_fail_usercopy+0x1a/0x20 [ 3195.005363][ T2941] _copy_to_user+0x1e/0x90 [ 3195.005390][ T2941] simple_read_from_buffer+0xc7/0x150 [ 3195.005413][ T2941] proc_fail_nth_read+0x1a3/0x210 [ 3195.005431][ T2941] ? proc_fault_inject_write+0x390/0x390 [ 3195.005448][ T2941] ? fsnotify_perm+0x470/0x5d0 [ 3195.005470][ T2941] ? security_file_permission+0x86/0xb0 [ 3195.005492][ T2941] ? proc_fault_inject_write+0x390/0x390 [ 3195.005509][ T2941] vfs_read+0x26c/0xad0 [ 3195.005530][ T2941] ? kernel_read+0x1f0/0x1f0 [ 3195.005548][ T2941] ? mutex_lock+0xb1/0x1e0 [ 3195.005572][ T2941] ? bit_wait_io_timeout+0x120/0x120 [ 3195.005597][ T2941] ? __fdget_pos+0x22e/0x2c0 [ 3195.005616][ T2941] ? ksys_read+0x77/0x2c0 [ 3195.005635][ T2941] ksys_read+0x199/0x2c0 [ 3195.005654][ T2941] ? lru_gen_update_size+0x580/0x580 [ 3195.005677][ T2941] ? vfs_write+0xeb0/0xeb0 [ 3195.005695][ T2941] ? debug_smp_processor_id+0x17/0x20 [ 3195.005720][ T2941] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3195.005743][ T2941] __x64_sys_read+0x7b/0x90 [ 3195.005767][ T2941] do_syscall_64+0x3d/0xb0 [ 3195.005787][ T2941] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3195.005806][ T2941] RIP: 0033:0x7f3e4807b78c [ 3195.005823][ T2941] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 3195.005839][ T2941] RSP: 002b:00007f3e48e7e0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3195.005860][ T2941] RAX: ffffffffffffffda RBX: 00007f3e4819bf80 RCX: 00007f3e4807b78c [ 3195.005873][ T2941] RDX: 000000000000000f RSI: 00007f3e48e7e130 RDI: 0000000000000004 [ 3195.005885][ T2941] RBP: 00007f3e48e7e120 R08: 0000000000000000 R09: 0000000000000000 [ 3195.005896][ T2941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3195.005906][ T2941] R13: 000000000000000b R14: 00007f3e4819bf80 R15: 00007ffc52828cd8 [ 3195.005923][ T2941] [ 3195.010924][ T2937] CPU: 1 PID: 2937 Comm: syz-executor.4 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3195.238337][ T2937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3195.248230][ T2937] Call Trace: [ 3195.251352][ T2937] [ 3195.254135][ T2937] dump_stack_lvl+0x151/0x1b7 [ 3195.258645][ T2937] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3195.264094][ T2937] dump_stack+0x15/0x18 [ 3195.268079][ T2937] should_fail_ex+0x3d0/0x520 [ 3195.272587][ T2937] should_fail+0xb/0x10 [ 3195.276575][ T2937] should_fail_usercopy+0x1a/0x20 [ 3195.281440][ T2937] _copy_to_user+0x1e/0x90 [ 3195.285691][ T2937] simple_read_from_buffer+0xc7/0x150 [ 3195.290898][ T2937] proc_fail_nth_read+0x1a3/0x210 [ 3195.295757][ T2937] ? proc_fault_inject_write+0x390/0x390 [ 3195.301222][ T2937] ? fsnotify_perm+0x470/0x5d0 [ 3195.305822][ T2937] ? security_file_permission+0x86/0xb0 [ 3195.311204][ T2937] ? proc_fault_inject_write+0x390/0x390 [ 3195.316671][ T2937] vfs_read+0x26c/0xad0 [ 3195.320674][ T2937] ? kernel_read+0x1f0/0x1f0 [ 3195.325088][ T2937] ? mutex_lock+0xb1/0x1e0 [ 3195.329345][ T2937] ? bit_wait_io_timeout+0x120/0x120 [ 3195.334465][ T2937] ? __fdget_pos+0x22e/0x2c0 [ 3195.338886][ T2937] ? ksys_read+0x77/0x2c0 [ 3195.343057][ T2937] ksys_read+0x199/0x2c0 [ 3195.347133][ T2937] ? unlock_page_memcg+0x160/0x160 [ 3195.352083][ T2937] ? vfs_write+0xeb0/0xeb0 [ 3195.356332][ T2937] ? debug_smp_processor_id+0x17/0x20 [ 3195.361539][ T2937] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3195.367448][ T2937] __x64_sys_read+0x7b/0x90 [ 3195.371789][ T2937] do_syscall_64+0x3d/0xb0 [ 3195.376042][ T2937] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3195.381769][ T2937] RIP: 0033:0x7f604867b78c [ 3195.386018][ T2937] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 3195.405464][ T2937] RSP: 002b:00007f60494190c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 23:38:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 23:38:22 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xd, 0xb00) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) syz_open_dev$usbmon(&(0x7f0000000000), 0x10001, 0x242082) 23:38:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x0) 23:38:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f0000000680)={0xac8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0xa8c, 0x8, 0x0, 0x1, [{0x4c8, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0x2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x464, 0x9, 0x0, 0x1, [{0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x7}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}]}, {0x464, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x298, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private1, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b4a134639758fa1871beab05fb5ce64f617c70fe036c7f92c370fdb64c93fe3d"}, @WGPEER_A_ALLOWEDIPS={0x158, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2b2abbcc7c19b5e5b145def947e25233c50a37156efe266cca75ece6e4717bf7"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b1c575cc7289c548161c132b926ed543ac388c5fabacfeddada862f52ac54a75"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f196a50d375076ac0a8ab8af7ddc2110c1a05b6c6186ae5ad2f25096d17d87cc"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "da854a308715c03bfe7cfe1366f29d1f9f2d7bcdb13c7f741f66c4f8a349527b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xfffffbff, @local, 0xbefd}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0xac8}, 0x1, 0x0, 0x0, 0x800}, 0x800) 23:38:22 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:22 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xd, 0xb00) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) syz_open_dev$usbmon(&(0x7f0000000000), 0x10001, 0x242082) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x10001, 0x242082) [ 3195.413836][ T2937] RAX: ffffffffffffffda RBX: 00007f604879bf80 RCX: 00007f604867b78c [ 3195.421600][ T2937] RDX: 000000000000000f RSI: 00007f6049419130 RDI: 0000000000000003 [ 3195.429411][ T2937] RBP: 00007f6049419120 R08: 0000000000000000 R09: 00236e6f6d627375 [ 3195.437221][ T2937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3195.445032][ T2937] R13: 000000000000000b R14: 00007f604879bf80 R15: 00007ffd43fd0de8 [ 3195.452854][ T2937] 23:38:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 23:38:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3003, 0x0) 23:38:22 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000840)=ANY=[@ANYBLOB="6572738a616e30000000000000000000a9267f382301be12dafe5cadf5178ffad3c19fc8acb4e1ebd6b5b618aa093ce944226a2b402f5ee8c475f598c55b9750", @ANYRES32=0x0, @ANYBLOB="00087800000000090000008141b20044006600007f2f90780a0101000a0101010189171cac1414bb00000000e0000002ac1414aae0000002861700000002070d5b02fe0b3ca867440074c90204ef4500"]}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) (async, rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r6, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r6, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r9, @ANYBLOB="7800001000000200000000074a79002800680000052f9078ac141444ac1e00018313c70000000000000000ac14140c7f00000100"]}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r9, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x90) (async) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000200)={0x528, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x13c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xaaaa}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0xe0, 0x8, 0x401}]}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r6}, {0xd0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xdd, 0x5, 0x2, 0x7807}, {0x1, 0x3f, 0x1f}, {0x9, 0x3f, 0x1f, 0x8000}, {0x0, 0x8, 0x1, 0x1}, {0x8001, 0x1, 0x8}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0x100, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc00000}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x528}, 0x1, 0x0, 0x0, 0x44018}, 0x24008840) r12 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) mlock2(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb0, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40c1}, 0xc010) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3002, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r12, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ff4000/0x4000)=nil, 0x4000}}) (async, rerun: 32) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async, rerun: 32) r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r13, 0x89f3, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(r13, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) 23:38:22 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x53330d) 23:38:22 executing program 0: syz_open_dev$usbmon(&(0x7f0000000040), 0xd, 0xb00) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xd, 0xb00) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) syz_open_dev$usbmon(&(0x7f0000000000), 0x10001, 0x242082) 23:38:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x401) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x12, r0, 0x0) 23:38:22 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001180)={&(0x7f0000000680)={0xac8, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0xa8c, 0x8, 0x0, 0x1, [{0x4c8, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @local, 0x2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x464, 0x9, 0x0, 0x1, [{0x4}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x7}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}]}, {0x464, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x298, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private1, 0x3}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b4a134639758fa1871beab05fb5ce64f617c70fe036c7f92c370fdb64c93fe3d"}, @WGPEER_A_ALLOWEDIPS={0x158, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x40}, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2b2abbcc7c19b5e5b145def947e25233c50a37156efe266cca75ece6e4717bf7"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b1c575cc7289c548161c132b926ed543ac388c5fabacfeddada862f52ac54a75"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f196a50d375076ac0a8ab8af7ddc2110c1a05b6c6186ae5ad2f25096d17d87cc"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "da854a308715c03bfe7cfe1366f29d1f9f2d7bcdb13c7f741f66c4f8a349527b"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xfffffbff, @local, 0xbefd}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}]}, 0xac8}, 0x1, 0x0, 0x0, 0x800}, 0x800) 23:38:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3004, 0x0) 23:38:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x401) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x12, r0, 0x0) (rerun: 32) 23:38:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3008, 0x0) 23:38:22 executing program 0: r0 = syz_io_uring_setup(0x7ae5, &(0x7f0000000080)={0x0, 0x16c, 0x200, 0x3, 0x2d2}, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000006, 0x50, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x20ffe000) 23:38:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x401) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x12, r0, 0x0) 23:38:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x1, 0x0, 0x4}, 0xff}}, 0x18) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x20000) 23:38:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3009, 0x0) 23:38:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x300e, 0x0) 23:38:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x10000, '\x00', 0x0, r3, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4800002, 0x110, r2, 0x5) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:22 executing program 0: r0 = syz_io_uring_setup(0x7ae5, &(0x7f0000000080)={0x0, 0x16c, 0x200, 0x3, 0x2d2}, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000006, 0x50, r0, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x20ffe000) 23:38:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x5, 0x6, {{0x18, 0x4, 0x3, 0x8, 0x60, 0x66, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9456}, {@local}, {@multicast1, 0x3f}]}, @noop, @lsrr={0x83, 0x2b, 0x47, [@remote, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local]}, @noop, @end]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r3, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000001100)=[0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001180)=[{}, {}], 0x10, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r9, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r10, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r10, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x80, 0x8000, 0x5, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x68, 0x0, 0x5, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, {[@end]}}}}}) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x90) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001080)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000800)={0x838, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x47, 0x1}, {0x8, 0x83, 0xed, 0x6}, {0x0, 0xaf, 0x3, 0x6}, {0x7fff, 0x28, 0x81, 0x4}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcc}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xd5, 0x4, 0x3, 0x2}, {0x2, 0x0, 0x9, 0x1}, {0x3, 0x1f, 0x1, 0xd0}, {0x3, 0xff, 0x1, 0x5}, {0x9, 0x80, 0xfb, 0xb32}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x144, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x0, 0xac, 0x5f58}, {0x100, 0xfc, 0x3f, 0x9}, {0x50, 0x2, 0x2, 0x2}, {0x9, 0x4, 0x0, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3000}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r10}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x38}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x9, 0x4, 0xff}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4010}, 0x800) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 23:38:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1, 0x4) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x80010, 0xffffffffffffffff, 0x6f52) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)="8815c9205c4bde68963745ab044115314debcc072cdae2eed71e9fc87af1f3edea80554e6dfa66402427f8b218a909cee9d7a545d34dfc4026e7c19aa3fee3bc1d2ce93394b6d437", 0x48, r0}, 0x68) 23:38:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x1, 0x0, 0x4}, 0xff}}, 0x18) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x20000) 23:38:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1, 0x4) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x80010, 0xffffffffffffffff, 0x6f52) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)="8815c9205c4bde68963745ab044115314debcc072cdae2eed71e9fc87af1f3edea80554e6dfa66402427f8b218a909cee9d7a545d34dfc4026e7c19aa3fee3bc1d2ce93394b6d437", 0x48, r0}, 0x68) 23:38:22 executing program 0: syz_io_uring_setup(0x7ae5, &(0x7f0000000080)={0x0, 0x16c, 0x200, 0x3, 0x2d2}, &(0x7f0000000000), &(0x7f0000000100)) (async) r0 = syz_io_uring_setup(0x7ae5, &(0x7f0000000080)={0x0, 0x16c, 0x200, 0x3, 0x2d2}, &(0x7f0000000000), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000006, 0x50, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x20ffe000) 23:38:22 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x5, 0x6, {{0x18, 0x4, 0x3, 0x8, 0x60, 0x66, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9456}, {@local}, {@multicast1, 0x3f}]}, @noop, @lsrr={0x83, 0x2b, 0x47, [@remote, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local]}, @noop, @end]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r3, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000001100)=[0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001180)=[{}, {}], 0x10, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r3, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000001100)=[0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001180)=[{}, {}], 0x10, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r9, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r10, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r10, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r10, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x80, 0x8000, 0x5, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x68, 0x0, 0x5, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, {[@end]}}}}}) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x90) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001080)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000800)={0x838, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x47, 0x1}, {0x8, 0x83, 0xed, 0x6}, {0x0, 0xaf, 0x3, 0x6}, {0x7fff, 0x28, 0x81, 0x4}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcc}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xd5, 0x4, 0x3, 0x2}, {0x2, 0x0, 0x9, 0x1}, {0x3, 0x1f, 0x1, 0xd0}, {0x3, 0xff, 0x1, 0x5}, {0x9, 0x80, 0xfb, 0xb32}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x144, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x0, 0xac, 0x5f58}, {0x100, 0xfc, 0x3f, 0x9}, {0x50, 0x2, 0x2, 0x2}, {0x9, 0x4, 0x0, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3000}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r10}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x38}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x9, 0x4, 0xff}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4010}, 0x800) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 23:38:22 executing program 0: syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000080)="ab7a55b980af387d07d6974752c9f220f282d2109a20cf8ca1cce9b2f5921da2ad82ad3c67cba230023ad2eb847ff3429bf6cc36374c78d82684d47b77f276dab8ca534fd41fc47a8bdd25183bf875387cacd02993dfb2d85c45bc23466ed627330e66a4e0", 0x65, r0}, 0x68) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000009, 0x50, r0, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x20ffe000) 23:38:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x300f, 0x0) 23:38:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x10000, '\x00', 0x0, r3, 0x3, 0x5, 0x2}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4800002, 0x110, r2, 0x5) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x1, 0x4) (async, rerun: 32) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000001, 0x80010, 0xffffffffffffffff, 0x6f52) (async, rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)="8815c9205c4bde68963745ab044115314debcc072cdae2eed71e9fc87af1f3edea80554e6dfa66402427f8b218a909cee9d7a545d34dfc4026e7c19aa3fee3bc1d2ce93394b6d437", 0x48, r0}, 0x68) 23:38:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x10000, '\x00', 0x0, r3, 0x3, 0x5, 0x2}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4800002, 0x110, r2, 0x5) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) pipe2(&(0x7f0000000000), 0x800) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x10000, '\x00', 0x0, r3, 0x3, 0x5, 0x2}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4800002, 0x110, r2, 0x5) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) 23:38:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x1, 0x0, 0x4}, 0xff}}, 0x18) (async) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x73, 0x2, {{0x1, 0x0, 0x4}, 0xff}}, 0x18) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x20000) 23:38:22 executing program 0: syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000080)="ab7a55b980af387d07d6974752c9f220f282d2109a20cf8ca1cce9b2f5921da2ad82ad3c67cba230023ad2eb847ff3429bf6cc36374c78d82684d47b77f276dab8ca534fd41fc47a8bdd25183bf875387cacd02993dfb2d85c45bc23466ed627330e66a4e0", 0x65, r0}, 0x68) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000009, 0x50, r0, 0x4) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x20ffe000) 23:38:22 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) 23:38:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x80, 0x7800, 0x5, 0x6, {{0x18, 0x4, 0x3, 0x8, 0x60, 0x66, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x10, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9456}, {@local}, {@multicast1, 0x3f}]}, @noop, @lsrr={0x83, 0x2b, 0x47, [@remote, @local, @dev={0xac, 0x14, 0x14, 0x1f}, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local]}, @noop, @end]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r3, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000001100)=[0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001180)=[{}, {}], 0x10, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r9, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r10, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r10, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x80, 0x8000, 0x5, 0x4, {{0x6, 0x4, 0x0, 0x3a, 0x18, 0x68, 0x0, 0x5, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, {[@end]}}}}}) (async) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x90) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001080)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000800)={0x838, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x47, 0x1}, {0x8, 0x83, 0xed, 0x6}, {0x0, 0xaf, 0x3, 0x6}, {0x7fff, 0x28, 0x81, 0x4}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcc}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xd5, 0x4, 0x3, 0x2}, {0x2, 0x0, 0x9, 0x1}, {0x3, 0x1f, 0x1, 0xd0}, {0x3, 0xff, 0x1, 0x5}, {0x9, 0x80, 0xfb, 0xb32}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x144, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x0, 0xac, 0x5f58}, {0x100, 0xfc, 0x3f, 0x9}, {0x50, 0x2, 0x2, 0x2}, {0x9, 0x4, 0x0, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3000}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r10}, {0x1e4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x38}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x9, 0x4, 0xff}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4010}, 0x800) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 23:38:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3015, 0x0) 23:38:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x100010, r1, 0xfffffffffffffffb) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2) 23:38:22 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) 23:38:22 executing program 0: syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000080)="ab7a55b980af387d07d6974752c9f220f282d2109a20cf8ca1cce9b2f5921da2ad82ad3c67cba230023ad2eb847ff3429bf6cc36374c78d82684d47b77f276dab8ca534fd41fc47a8bdd25183bf875387cacd02993dfb2d85c45bc23466ed627330e66a4e0", 0x65, r0}, 0x68) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000009, 0x50, r0, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x20ffe000) 23:38:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000080)=[0x8, 0x20, 0x3, 0x24, 0x1, 0x40000, 0x1]) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 23:38:22 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x537302) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x80, 0x0, [{}, {@multicast1}, {@private}, {@remote}, {@remote}, {@remote}, {@dev}, {@private}]}}) 23:38:22 executing program 3: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) 23:38:22 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3021, 0x0) 23:38:22 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x100010, r1, 0xfffffffffffffffb) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2) 23:38:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000080)=[0x8, 0x20, 0x3, 0x24, 0x1, 0x40000, 0x1]) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 23:38:22 executing program 0: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000), 0x4) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) 23:38:22 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000080)=[0x8, 0x20, 0x3, 0x24, 0x1, 0x40000, 0x1]) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3022, 0x0) 23:38:23 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x537302) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x80, 0x0, [{}, {@multicast1}, {@private}, {@remote}, {@remote}, {@remote}, {@dev}, {@private}]}}) 23:38:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x100010, r1, 0xfffffffffffffffb) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2) 23:38:23 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x537302) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x80, 0x0, [{}, {@multicast1}, {@private}, {@remote}, {@remote}, {@remote}, {@dev}, {@private}]}}) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x537302) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0x80, 0x0, [{}, {@multicast1}, {@private}, {@remote}, {@remote}, {@remote}, {@dev}, {@private}]}}) (async) 23:38:23 executing program 0: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000), 0x4) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3023, 0x0) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x307b, 0x0) 23:38:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa043}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x10) read$rfkill(r1, &(0x7f0000000000), 0x8) 23:38:23 executing program 0: setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000), 0x4) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000000), 0x4) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x20000000000000, 0x121682) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2180c0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x30f0, 0x0) 23:38:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000) 23:38:23 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000000c0)) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000240)) write$cgroup_type(r0, &(0x7f0000000100), 0x9) ioctl$SIOCSIFMTU(r1, 0x8914, &(0x7f0000000000)={'ip_vti0\x00'}) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x20000000000000, 0x121682) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2180c0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x1f, @loopback, 0x101}, {0xa, 0x4e25, 0xee8, @loopback, 0xfb}, 0xffffffffffffffff, {[0x5, 0x80000d, 0x1000000, 0x137, 0x4c735, 0x400, 0x7ff, 0x9]}}, 0x5c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x10012, r0, 0x20ffe000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x410, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, 0xffffffffffffffff, 0x10000000) 23:38:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa043}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x10) read$rfkill(r1, &(0x7f0000000000), 0x8) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa043}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x10) (async) read$rfkill(r1, &(0x7f0000000000), 0x8) (async) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x30f2, 0x0) 23:38:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (rerun: 64) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000) 23:38:23 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000000c0)) (async) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000240)) (async) write$cgroup_type(r0, &(0x7f0000000100), 0x9) (async) ioctl$SIOCSIFMTU(r1, 0x8914, &(0x7f0000000000)={'ip_vti0\x00'}) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) 23:38:23 executing program 0: syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x1f, @loopback, 0x101}, {0xa, 0x4e25, 0xee8, @loopback, 0xfb}, 0xffffffffffffffff, {[0x5, 0x80000d, 0x1000000, 0x137, 0x4c735, 0x400, 0x7ff, 0x9]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x1f, @loopback, 0x101}, {0xa, 0x4e25, 0xee8, @loopback, 0xfb}, 0xffffffffffffffff, {[0x5, 0x80000d, 0x1000000, 0x137, 0x4c735, 0x400, 0x7ff, 0x9]}}, 0x5c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x10012, r0, 0x20ffe000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x410, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, 0xffffffffffffffff, 0x10000000) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x20000000000000, 0x121682) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2180c0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2180c0, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000000c0)) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000240)) (async) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000240)) write$cgroup_type(r0, &(0x7f0000000100), 0x9) ioctl$SIOCSIFMTU(r1, 0x8914, &(0x7f0000000000)={'ip_vti0\x00'}) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) 23:38:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x1f, @loopback, 0x101}, {0xa, 0x4e25, 0xee8, @loopback, 0xfb}, 0xffffffffffffffff, {[0x5, 0x80000d, 0x1000000, 0x137, 0x4c735, 0x400, 0x7ff, 0x9]}}, 0x5c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000a, 0x10012, r0, 0x20ffe000) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000100)=0x410, 0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, 0xffffffffffffffff, 0x10000000) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x110, 0xffffffffffffffff, 0x100000000) 23:38:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa043}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x10) read$rfkill(r1, &(0x7f0000000000), 0x8) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xa043}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x10) (async) read$rfkill(r1, &(0x7f0000000000), 0x8) (async) 23:38:23 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x880, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x282c00, 0x0) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x7b, r1, &(0x7f0000000300)="5d9c3df095e8a7d59b26dd9d7ecbba46d4e2e4fca183e89fc2c493a8c557b63e494abf9338bc471c2f99615081b3ffd5f352ed88c62be602e7e046a9a3c3d19e002d7d046053c8721c482c3901313df05c4ffe68be4766e76d3b22cf1d6a468e1dca5c49fd822614beadd16881314c2abf8f160cb1506733a9912ec48b1824e989f03fd4efbb8455b4cf646e34", 0x8d, 0x20, 0x0, 0x3}, &(0x7f0000000400)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x20ffe000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x60d41, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/10, 0x1001000, 0x800, 0x7fff, 0x1}, 0x20) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000280)) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000140)=""/171, 0x0, 0x1000, 0x9, 0x2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x930, 0x1, 0x50, r4, 0x0) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) 23:38:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x10000) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x110, 0xffffffffffffffff, 0x100000000) 23:38:23 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8) 23:38:23 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x880, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x282c00, 0x0) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x7b, r1, &(0x7f0000000300)="5d9c3df095e8a7d59b26dd9d7ecbba46d4e2e4fca183e89fc2c493a8c557b63e494abf9338bc471c2f99615081b3ffd5f352ed88c62be602e7e046a9a3c3d19e002d7d046053c8721c482c3901313df05c4ffe68be4766e76d3b22cf1d6a468e1dca5c49fd822614beadd16881314c2abf8f160cb1506733a9912ec48b1824e989f03fd4efbb8455b4cf646e34", 0x8d, 0x20, 0x0, 0x3}, &(0x7f0000000400)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x20ffe000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x60d41, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/10, 0x1001000, 0x800, 0x7fff, 0x1}, 0x20) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000280)) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000140)=""/171, 0x0, 0x1000, 0x9, 0x2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x930, 0x1, 0x50, r4, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x880, 0x4) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x282c00, 0x0) (async) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x7b, r1, &(0x7f0000000300)="5d9c3df095e8a7d59b26dd9d7ecbba46d4e2e4fca183e89fc2c493a8c557b63e494abf9338bc471c2f99615081b3ffd5f352ed88c62be602e7e046a9a3c3d19e002d7d046053c8721c482c3901313df05c4ffe68be4766e76d3b22cf1d6a468e1dca5c49fd822614beadd16881314c2abf8f160cb1506733a9912ec48b1824e989f03fd4efbb8455b4cf646e34", 0x8d, 0x20, 0x0, 0x3}, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x20ffe000) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x60d41, 0x0) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/10, 0x1001000, 0x800, 0x7fff, 0x1}, 0x20) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000280)) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000140)=""/171, 0x0, 0x1000, 0x9, 0x2}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x930, 0x1, 0x50, r4, 0x0) (async) 23:38:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x200000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7ff, '\x00', 0x0, r2, 0x0, 0x0, 0x4}, 0x48) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x4}) 23:38:23 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 23:38:23 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x880, 0x4) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x282c00, 0x0) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x7b, r1, &(0x7f0000000300)="5d9c3df095e8a7d59b26dd9d7ecbba46d4e2e4fca183e89fc2c493a8c557b63e494abf9338bc471c2f99615081b3ffd5f352ed88c62be602e7e046a9a3c3d19e002d7d046053c8721c482c3901313df05c4ffe68be4766e76d3b22cf1d6a468e1dca5c49fd822614beadd16881314c2abf8f160cb1506733a9912ec48b1824e989f03fd4efbb8455b4cf646e34", 0x8d, 0x20, 0x0, 0x3}, &(0x7f0000000400)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x20ffe000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x60d41, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/10, 0x1001000, 0x800, 0x7fff, 0x1}, 0x20) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000280)) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000140)=""/171, 0x0, 0x1000, 0x9, 0x2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x930, 0x1, 0x50, r4, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x880, 0x4) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0), 0x282c00, 0x0) (async) io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x7b, r1, &(0x7f0000000300)="5d9c3df095e8a7d59b26dd9d7ecbba46d4e2e4fca183e89fc2c493a8c557b63e494abf9338bc471c2f99615081b3ffd5f352ed88c62be602e7e046a9a3c3d19e002d7d046053c8721c482c3901313df05c4ffe68be4766e76d3b22cf1d6a468e1dca5c49fd822614beadd16881314c2abf8f160cb1506733a9912ec48b1824e989f03fd4efbb8455b4cf646e34", 0x8d, 0x20, 0x0, 0x3}, &(0x7f0000000400)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x20ffe000) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x60d41, 0x0) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000000c0)=""/10, 0x1001000, 0x800, 0x7fff, 0x1}, 0x20) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000280)) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000140)=""/171, 0x0, 0x1000, 0x9, 0x2}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000fff000/0x1000)=nil, 0x930, 0x1, 0x50, r4, 0x0) (async) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async, rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async, rerun: 64) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (rerun: 64) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000002, 0x110, 0xffffffffffffffff, 0x100000000) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9) 23:38:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x200000) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7ff, '\x00', 0x0, r2, 0x0, 0x0, 0x4}, 0x48) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x4}) 23:38:23 executing program 1: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x50, 0xffffffffffffffff, 0xffffffbfffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) inotify_init1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="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", 0x1000, r0}, 0x68) 23:38:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x200000) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7ff, '\x00', 0x0, r2, 0x0, 0x0, 0x4}, 0x48) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x4}) 23:38:23 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x0, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000607000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000042b000/0x4000)=nil, &(0x7f0000c73000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000eb6000/0x2000)=nil, &(0x7f0000c4f000/0x4000)=nil, &(0x7f00007bd000/0x1000)=nil, &(0x7f0000b2f000/0x1000)=nil, &(0x7f0000000200)="878b916340d53e10be3aacd0dfd86f56ff33e09d6c60304384819b6f3758a2c059442fbdb894e43c1856c879f91669021c9d74349608f5d0e2e63106a7e84bbb378fc0443ae60927e287358796d3e1815609ac125ef28e41c7f5076a84e4585737f87680f3664e3b65a31313919999171485c7a2480605722b28c753e96eaebc206d609c2e6ef471ce6ddb1051f3fa9d42b8e8cb368c595f0063a856c402e8ed81c2541742199027761bae0007f6d30d10f9fde9a9f94f6d6b876465dab512dd49922a05a433d7e05618c04f30532f6dfd82e034c067f7d54db6fc8d0a40be892a45e31bcf560de5c3b1a99b140bcd", 0xef, r0}, 0x68) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe) 23:38:23 executing program 1: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x50, 0xffffffffffffffff, 0xffffffbfffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) inotify_init1(0x80000) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="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", 0x1000, r0}, 0x68) 23:38:23 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r2, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000000c0)) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000240)) write$cgroup_type(r0, &(0x7f0000000100), 0x9) ioctl$SIOCSIFMTU(r1, 0x8914, &(0x7f0000000000)={'ip_vti0\x00'}) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) 23:38:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000607000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000042b000/0x4000)=nil, &(0x7f0000c73000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000eb6000/0x2000)=nil, &(0x7f0000c4f000/0x4000)=nil, &(0x7f00007bd000/0x1000)=nil, &(0x7f0000b2f000/0x1000)=nil, &(0x7f0000000200)="878b916340d53e10be3aacd0dfd86f56ff33e09d6c60304384819b6f3758a2c059442fbdb894e43c1856c879f91669021c9d74349608f5d0e2e63106a7e84bbb378fc0443ae60927e287358796d3e1815609ac125ef28e41c7f5076a84e4585737f87680f3664e3b65a31313919999171485c7a2480605722b28c753e96eaebc206d609c2e6ef471ce6ddb1051f3fa9d42b8e8cb368c595f0063a856c402e8ed81c2541742199027761bae0007f6d30d10f9fde9a9f94f6d6b876465dab512dd49922a05a433d7e05618c04f30532f6dfd82e034c067f7d54db6fc8d0a40be892a45e31bcf560de5c3b1a99b140bcd", 0xef, r0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000607000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000042b000/0x4000)=nil, &(0x7f0000c73000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000eb6000/0x2000)=nil, &(0x7f0000c4f000/0x4000)=nil, &(0x7f00007bd000/0x1000)=nil, &(0x7f0000b2f000/0x1000)=nil, &(0x7f0000000200)="878b916340d53e10be3aacd0dfd86f56ff33e09d6c60304384819b6f3758a2c059442fbdb894e43c1856c879f91669021c9d74349608f5d0e2e63106a7e84bbb378fc0443ae60927e287358796d3e1815609ac125ef28e41c7f5076a84e4585737f87680f3664e3b65a31313919999171485c7a2480605722b28c753e96eaebc206d609c2e6ef471ce6ddb1051f3fa9d42b8e8cb368c595f0063a856c402e8ed81c2541742199027761bae0007f6d30d10f9fde9a9f94f6d6b876465dab512dd49922a05a433d7e05618c04f30532f6dfd82e034c067f7d54db6fc8d0a40be892a45e31bcf560de5c3b1a99b140bcd", 0xef, r0}, 0x68) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 4: syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r2, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) 23:38:23 executing program 1: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x50, 0xffffffffffffffff, 0xffffffbfffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) inotify_init1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="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", 0x1000, r0}, 0x68) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x50, 0xffffffffffffffff, 0xffffffbfffffffff) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) inotify_init1(0x80000) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001000)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="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", 0x1000, r0}, 0x68) (async) 23:38:23 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000000c0)) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000240)) write$cgroup_type(r0, &(0x7f0000000100), 0x9) ioctl$SIOCSIFMTU(r1, 0x8914, &(0x7f0000000000)={'ip_vti0\x00'}) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000607000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000042b000/0x4000)=nil, &(0x7f0000c73000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000eb6000/0x2000)=nil, &(0x7f0000c4f000/0x4000)=nil, &(0x7f00007bd000/0x1000)=nil, &(0x7f0000b2f000/0x1000)=nil, &(0x7f0000000200)="878b916340d53e10be3aacd0dfd86f56ff33e09d6c60304384819b6f3758a2c059442fbdb894e43c1856c879f91669021c9d74349608f5d0e2e63106a7e84bbb378fc0443ae60927e287358796d3e1815609ac125ef28e41c7f5076a84e4585737f87680f3664e3b65a31313919999171485c7a2480605722b28c753e96eaebc206d609c2e6ef471ce6ddb1051f3fa9d42b8e8cb368c595f0063a856c402e8ed81c2541742199027761bae0007f6d30d10f9fde9a9f94f6d6b876465dab512dd49922a05a433d7e05618c04f30532f6dfd82e034c067f7d54db6fc8d0a40be892a45e31bcf560de5c3b1a99b140bcd", 0xef, r0}, 0x68) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) 23:38:23 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x4, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000000c0)) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000240)) write$cgroup_type(r0, &(0x7f0000000100), 0x9) ioctl$SIOCSIFMTU(r1, 0x8914, &(0x7f0000000000)={'ip_vti0\x00'}) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) 23:38:23 executing program 4: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r2, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) 23:38:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000, 0x2}) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, r0, 0x0) 23:38:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x21) 23:38:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x30f0, 0x0) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x22) 23:38:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)="75bcf2f77f19b493c537aeec588214bd4c0825eb23a46fdf32716041353f4738dd4e755e66bf479f99f46b5c9dfb933c24f661f57c92ec3e7055647cfc5e5bf30d02f4e72f49ffc368fff5f4acc8601e3dafa4ba0b7654d686f0", 0x5a, r0}, 0x68) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000, 0x2}) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, r0, 0x0) 23:38:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r2], 0x104}, 0x1, 0x0, 0x0, 0x20040010}, 0x9000) syz_open_dev$usbmon(&(0x7f0000000280), 0x9, 0x60a341) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) mmap$usbmon(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x3000003, 0x10010, r3, 0x80000000) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 23:38:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400010000000000000000000000ffff7f000001e9b5bf514860259449cce309d16e5c"], 0x28}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xe0d8758ec8b6737b}, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}}) syz_io_uring_setup(0x6773, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x7792, &(0x7f0000000240), &(0x7f00000002c0), 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) 23:38:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2000, 0x2}) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, r0, 0x0) 23:38:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x23) 23:38:23 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)="75bcf2f77f19b493c537aeec588214bd4c0825eb23a46fdf32716041353f4738dd4e755e66bf479f99f46b5c9dfb933c24f661f57c92ec3e7055647cfc5e5bf30d02f4e72f49ffc368fff5f4acc8601e3dafa4ba0b7654d686f0", 0x5a, r0}, 0x68) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0xa14, 0x4) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x4, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000007c37bce42493481d2bc027a0465bd0226a5e4363ebd318bea91a96614de3adafd5b660f53f20c2bdad584f1fc114ed542b678c5d3507c0690736dc4b24a2ac5d8eba120936a6c4179f2d1c801d839501581d7b92ea3fe7211496971e3ea1651eb9f5cf59d7abf2aab58091943321", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf2502000000140001000000000000000000000000000000000105000600080000000400040008000200ffff000014000100fe8800000000000000000000000001010800030007000000"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000000)="78330a13163062757af119865c687582ca986b62775bbb2dbda1f6", 0x1b, r0}, 0x68) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0xcb5c, @loopback}, {0xa, 0x4e24, 0xac70, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x0, {[0x3e6, 0x3, 0x48, 0x295, 0x5b1, 0x3, 0xffff0001, 0xfffffc00]}}, 0x5c) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x284e41, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10010, r2, 0xa2) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7b) 23:38:23 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000080)="75bcf2f77f19b493c537aeec588214bd4c0825eb23a46fdf32716041353f4738dd4e755e66bf479f99f46b5c9dfb933c24f661f57c92ec3e7055647cfc5e5bf30d02f4e72f49ffc368fff5f4acc8601e3dafa4ba0b7654d686f0", 0x5a, r0}, 0x68) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:23 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@loopback, 0x0, 0x0, 0x50, 0x0, [{@remote}, {@initdev}, {@private}, {@remote}, {}]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240)=0x20, 0x4) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) r1 = syz_io_uring_setup(0x2e6a, &(0x7f0000000080)={0x0, 0x39b0, 0x400, 0x3, 0x163}, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x810, r1, 0x0) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0xa14, 0x4) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0xa14, 0x4) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf0) 23:38:23 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8, 0x20, 0xa33, 0x5, {{0x38, 0x4, 0x0, 0x0, 0xe0, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@end, @timestamp={0x44, 0x28, 0x94, 0x0, 0x4, [0xffffffe1, 0x9, 0xffff, 0x8001, 0x5, 0xffffffff, 0x8, 0xffff, 0x5]}, @timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x8, [{@remote, 0x200}, {@multicast1}, {@local, 0x4}]}, @lsrr={0x83, 0x17, 0x7e, [@dev={0xac, 0x14, 0x14, 0x36}, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @ssrr={0x89, 0x23, 0xbf, [@private=0xa010100, @multicast1, @rand_addr=0x64010102, @empty, @remote, @private=0xa010101, @multicast1, @remote]}, @cipso={0x86, 0x3e, 0x2, [{0x2, 0x5, "6744fa"}, {0x7, 0x8, "cc615bb5c167"}, {0x2, 0xb, "e2d1700a73f04a5394"}, {0x5, 0x8, "d5be60c9b0bf"}, {0x5, 0x7, "95e8546010"}, {0x2, 0x4, "5fb3"}, {0x2, 0x7, "d3edf226c6"}, {0x7, 0x6, "d6a98b92"}]}, @generic={0x83, 0xe, "bdabff58b8e440dd874add93"}]}}}}}) 23:38:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 1) 23:38:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x4, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000007c37bce42493481d2bc027a0465bd0226a5e4363ebd318bea91a96614de3adafd5b660f53f20c2bdad584f1fc114ed542b678c5d3507c0690736dc4b24a2ac5d8eba120936a6c4179f2d1c801d839501581d7b92ea3fe7211496971e3ea1651eb9f5cf59d7abf2aab58091943321", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf2502000000140001000000000000000000000000000000000105000600080000000400040008000200ffff000014000100fe8800000000000000000000000001010800030007000000"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000000)="78330a13163062757af119865c687582ca986b62775bbb2dbda1f6", 0x1b, r0}, 0x68) (async, rerun: 64) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0xcb5c, @loopback}, {0xa, 0x4e24, 0xac70, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x0, {[0x3e6, 0x3, 0x48, 0x295, 0x5b1, 0x3, 0xffff0001, 0xfffffc00]}}, 0x5c) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x284e41, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10010, r2, 0xa2) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8, 0x20, 0xa33, 0x5, {{0x38, 0x4, 0x0, 0x0, 0xe0, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@end, @timestamp={0x44, 0x28, 0x94, 0x0, 0x4, [0xffffffe1, 0x9, 0xffff, 0x8001, 0x5, 0xffffffff, 0x8, 0xffff, 0x5]}, @timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x8, [{@remote, 0x200}, {@multicast1}, {@local, 0x4}]}, @lsrr={0x83, 0x17, 0x7e, [@dev={0xac, 0x14, 0x14, 0x36}, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @ssrr={0x89, 0x23, 0xbf, [@private=0xa010100, @multicast1, @rand_addr=0x64010102, @empty, @remote, @private=0xa010101, @multicast1, @remote]}, @cipso={0x86, 0x3e, 0x2, [{0x2, 0x5, "6744fa"}, {0x7, 0x8, "cc615bb5c167"}, {0x2, 0xb, "e2d1700a73f04a5394"}, {0x5, 0x8, "d5be60c9b0bf"}, {0x5, 0x7, "95e8546010"}, {0x2, 0x4, "5fb3"}, {0x2, 0x7, "d3edf226c6"}, {0x7, 0x6, "d6a98b92"}]}, @generic={0x83, 0xe, "bdabff58b8e440dd874add93"}]}}}}}) 23:38:23 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@loopback, 0x0, 0x0, 0x50, 0x0, [{@remote}, {@initdev}, {@private}, {@remote}, {}]}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240)=0x20, 0x4) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) (async) r1 = syz_io_uring_setup(0x2e6a, &(0x7f0000000080)={0x0, 0x39b0, 0x400, 0x3, 0x163}, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x810, r1, 0x0) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf2) 23:38:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x4, 0x12, 0xffffffffffffffff, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000007c37bce42493481d2bc027a0465bd0226a5e4363ebd318bea91a96614de3adafd5b660f53f20c2bdad584f1fc114ed542b678c5d3507c0690736dc4b24a2ac5d8eba120936a6c4179f2d1c801d839501581d7b92ea3fe7211496971e3ea1651eb9f5cf59d7abf2aab58091943321", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf2502000000140001000000000000000000000000000000000105000600080000000400040008000200ffff000014000100fe8800000000000000000000000001010800030007000000"], 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000000)="78330a13163062757af119865c687582ca986b62775bbb2dbda1f6", 0x1b, r0}, 0x68) (async) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0xcb5c, @loopback}, {0xa, 0x4e24, 0xac70, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x0, {[0x3e6, 0x3, 0x48, 0x295, 0x5b1, 0x3, 0xffff0001, 0xfffffc00]}}, 0x5c) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x284e41, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10010, r2, 0xa2) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 0: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={@loopback, 0x0, 0x0, 0x50, 0x0, [{@remote}, {@initdev}, {@private}, {@remote}, {}]}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240)=0x20, 0x4) (async) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240)=0x20, 0x4) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) syz_io_uring_setup(0x2e6a, &(0x7f0000000080)={0x0, 0x39b0, 0x400, 0x3, 0x163}, &(0x7f0000000100), &(0x7f0000000140)) (async) r1 = syz_io_uring_setup(0x2e6a, &(0x7f0000000080)={0x0, 0x39b0, 0x400, 0x3, 0x163}, &(0x7f0000000100), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x810, r1, 0x0) 23:38:23 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8, 0x20, 0xa33, 0x5, {{0x38, 0x4, 0x0, 0x0, 0xe0, 0x67, 0x0, 0x0, 0x4, 0x0, @remote, @rand_addr=0x64010101, {[@end, @timestamp={0x44, 0x28, 0x94, 0x0, 0x4, [0xffffffe1, 0x9, 0xffff, 0x8001, 0x5, 0xffffffff, 0x8, 0xffff, 0x5]}, @timestamp_prespec={0x44, 0x1c, 0x91, 0x3, 0x8, [{@remote, 0x200}, {@multicast1}, {@local, 0x4}]}, @lsrr={0x83, 0x17, 0x7e, [@dev={0xac, 0x14, 0x14, 0x36}, @multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @ssrr={0x89, 0x23, 0xbf, [@private=0xa010100, @multicast1, @rand_addr=0x64010102, @empty, @remote, @private=0xa010101, @multicast1, @remote]}, @cipso={0x86, 0x3e, 0x2, [{0x2, 0x5, "6744fa"}, {0x7, 0x8, "cc615bb5c167"}, {0x2, 0xb, "e2d1700a73f04a5394"}, {0x5, 0x8, "d5be60c9b0bf"}, {0x5, 0x7, "95e8546010"}, {0x2, 0x4, "5fb3"}, {0x2, 0x7, "d3edf226c6"}, {0x7, 0x6, "d6a98b92"}]}, @generic={0x83, 0xe, "bdabff58b8e440dd874add93"}]}}}}}) [ 3196.365927][ T3379] FAULT_INJECTION: forcing a failure. [ 3196.365927][ T3379] name failslab, interval 1, probability 0, space 0, times 0 [ 3196.385881][ T3379] CPU: 1 PID: 3379 Comm: syz-executor.3 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3196.395805][ T3379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3196.405702][ T3379] Call Trace: [ 3196.408826][ T3379] [ 3196.411600][ T3379] dump_stack_lvl+0x151/0x1b7 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000080)=0xa14, 0x4) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20efe002) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, r1, 0x4) 23:38:23 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0, 0x19, 0x2, {0x1860, {0x1, 0x4}, 0x1, 0xee01, 0xee00, 0x0, 0x0, 0x6, 0x7fffffff, 0xffffffffffffffff, 0x158, 0xfce, 0x3, 0x3, 0x3fffffffc0, 0x4b6bce76, 0x100000001, 0x6, 0xfffffffffffff14e, 0x3ff}}, 0xa0) 23:38:23 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 2) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x810) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x1c1880) read$msr(0xffffffffffffffff, &(0x7f0000000080)=""/78, 0x4e) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 3196.416119][ T3379] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3196.421414][ T3379] dump_stack+0x15/0x18 [ 3196.425402][ T3379] should_fail_ex+0x3d0/0x520 [ 3196.429913][ T3379] ? vm_area_dup+0x27/0x290 [ 3196.434255][ T3379] __should_failslab+0xaf/0xf0 [ 3196.438853][ T3379] should_failslab+0x9/0x20 [ 3196.443207][ T3379] kmem_cache_alloc+0x3b/0x2c0 23:38:23 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0, 0x19, 0x2, {0x1860, {0x1, 0x4}, 0x1, 0xee01, 0xee00, 0x0, 0x0, 0x6, 0x7fffffff, 0xffffffffffffffff, 0x158, 0xfce, 0x3, 0x3, 0x3fffffffc0, 0x4b6bce76, 0x100000001, 0x6, 0xfffffffffffff14e, 0x3ff}}, 0xa0) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x900) [ 3196.443256][ T3379] vm_area_dup+0x27/0x290 [ 3196.443284][ T3379] ? __split_vma+0x19a/0x880 [ 3196.443316][ T3379] __split_vma+0x1ba/0x880 [ 3196.443348][ T3379] do_mas_align_munmap+0x3bf/0x1400 [ 3196.443379][ T3379] ? kernel_text_address+0xa9/0xe0 [ 3196.443413][ T3379] ? __kernel_text_address+0xd/0x40 23:38:23 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x200001) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x990, 0x0) read$msr(r1, &(0x7f0000000140)=""/191, 0xbf) 23:38:23 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RGETATTR(r0, &(0x7f0000000080)={0xa0, 0x19, 0x2, {0x1860, {0x1, 0x4}, 0x1, 0xee01, 0xee00, 0x0, 0x0, 0x6, 0x7fffffff, 0xffffffffffffffff, 0x158, 0xfce, 0x3, 0x3, 0x3fffffffc0, 0x4b6bce76, 0x100000001, 0x6, 0xfffffffffffff14e, 0x3ff}}, 0xa0) 23:38:23 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x1c1880) read$msr(0xffffffffffffffff, &(0x7f0000000080)=""/78, 0x4e) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe00) 23:38:23 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf00) [ 3196.443448][ T3379] ? avc_has_perm_noaudit+0x348/0x430 [ 3196.443474][ T3379] ? do_mas_munmap+0x2b0/0x2b0 [ 3196.443508][ T3379] ? mas_find+0x4e4/0x520 [ 3196.443538][ T3379] do_mas_munmap+0x23e/0x2b0 [ 3196.443569][ T3379] mmap_region+0x75c/0x2390 [ 3196.443604][ T3379] ? file_mmap_ok+0x150/0x150 [ 3196.443641][ T3379] ? cap_mmap_addr+0x169/0x2e0 [ 3196.443666][ T3379] ? __kasan_check_read+0x11/0x20 [ 3196.443697][ T3379] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3196.443732][ T3379] ? arch_get_unmapped_area+0x780/0x780 [ 3196.443765][ T3379] ? file_mmap_ok+0x104/0x150 [ 3196.443794][ T3379] do_mmap+0x853/0xe30 [ 3196.443823][ T3379] ? mlock_future_check+0x110/0x110 [ 3196.443856][ T3379] vm_mmap_pgoff+0x208/0x430 [ 3196.443881][ T3379] ? account_locked_vm+0x250/0x250 [ 3196.443906][ T3379] ? __fget_files+0x2cb/0x330 [ 3196.443934][ T3379] ksys_mmap_pgoff+0x15d/0x1e0 [ 3196.443966][ T3379] __x64_sys_mmap+0x103/0x120 [ 3196.443995][ T3379] do_syscall_64+0x3d/0xb0 [ 3196.444021][ T3379] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3196.444046][ T3379] RIP: 0033:0x7fc69e27cae9 [ 3196.444065][ T3379] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3196.444081][ T3379] RSP: 002b:00007fc69efa20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3196.444106][ T3379] RAX: ffffffffffffffda RBX: 00007fc69e39bf80 RCX: 00007fc69e27cae9 [ 3196.444122][ T3379] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3196.444135][ T3379] RBP: 00007fc69efa2120 R08: 0000000000000003 R09: 0000000000000000 [ 3196.444150][ T3379] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3196.444163][ T3379] R13: 000000000000000b R14: 00007fc69e39bf80 R15: 00007ffd81d6c3c8 [ 3196.444184][ T3379] [ 3196.508141][ T3432] FAULT_INJECTION: forcing a failure. [ 3196.508141][ T3432] name failslab, interval 1, probability 0, space 0, times 0 [ 3196.698746][ T3432] CPU: 1 PID: 3432 Comm: syz-executor.3 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3196.698777][ T3432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3196.698791][ T3432] Call Trace: [ 3196.698797][ T3432] [ 3196.698807][ T3432] dump_stack_lvl+0x151/0x1b7 [ 3196.698842][ T3432] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3196.698872][ T3432] dump_stack+0x15/0x18 [ 3196.738331][ T3432] should_fail_ex+0x3d0/0x520 [ 3196.742850][ T3432] ? vm_area_dup+0x65/0x290 [ 3196.747180][ T3432] __should_failslab+0xaf/0xf0 [ 3196.751784][ T3432] should_failslab+0x9/0x20 [ 3196.756119][ T3432] kmem_cache_alloc+0x3b/0x2c0 [ 3196.760719][ T3432] vm_area_dup+0x65/0x290 [ 3196.764895][ T3432] __split_vma+0x1ba/0x880 [ 3196.769138][ T3432] do_mas_align_munmap+0x3bf/0x1400 [ 3196.774169][ T3432] ? kernel_text_address+0xa9/0xe0 [ 3196.779124][ T3432] ? __kernel_text_address+0xd/0x40 [ 3196.784154][ T3432] ? avc_has_perm_noaudit+0x348/0x430 [ 3196.789362][ T3432] ? do_mas_munmap+0x2b0/0x2b0 [ 3196.793969][ T3432] ? mas_find+0x4e4/0x520 [ 3196.798128][ T3432] do_mas_munmap+0x23e/0x2b0 [ 3196.802553][ T3432] mmap_region+0x75c/0x2390 [ 3196.806895][ T3432] ? file_mmap_ok+0x150/0x150 [ 3196.811404][ T3432] ? cap_mmap_addr+0x169/0x2e0 [ 3196.816003][ T3432] ? __kasan_check_read+0x11/0x20 [ 3196.820870][ T3432] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3196.826332][ T3432] ? arch_get_unmapped_area+0x780/0x780 [ 3196.831716][ T3432] ? file_mmap_ok+0x104/0x150 [ 3196.836234][ T3432] do_mmap+0x853/0xe30 [ 3196.840137][ T3432] ? mlock_future_check+0x110/0x110 [ 3196.845170][ T3432] vm_mmap_pgoff+0x208/0x430 [ 3196.849596][ T3432] ? account_locked_vm+0x250/0x250 [ 3196.854542][ T3432] ? __fget_files+0x2cb/0x330 [ 3196.859058][ T3432] ksys_mmap_pgoff+0x15d/0x1e0 [ 3196.863654][ T3432] __x64_sys_mmap+0x103/0x120 [ 3196.868176][ T3432] do_syscall_64+0x3d/0xb0 [ 3196.872420][ T3432] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3196.878149][ T3432] RIP: 0033:0x7fc69e27cae9 [ 3196.882413][ T3432] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3196.901845][ T3432] RSP: 002b:00007fc69efa20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3196.910090][ T3432] RAX: ffffffffffffffda RBX: 00007fc69e39bf80 RCX: 00007fc69e27cae9 23:38:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20efe002) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, r1, 0x4) 23:38:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x1c1880) read$msr(0xffffffffffffffff, &(0x7f0000000080)=""/78, 0x4e) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:24 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1008) 23:38:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x200001) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x990, 0x0) read$msr(r1, &(0x7f0000000140)=""/191, 0xbf) 23:38:24 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x10a00) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000040)=""/252, 0xfc, 0x0, &(0x7f0000000140)=""/201, 0xc9}}, 0x10) 23:38:24 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 3) 23:38:24 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x10a00) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000040)=""/252, 0xfc, 0x0, &(0x7f0000000140)=""/201, 0xc9}}, 0x10) 23:38:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x200001) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x990, 0x0) read$msr(r1, &(0x7f0000000140)=""/191, 0xbf) 23:38:24 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1500) 23:38:24 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 4) 23:38:24 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) msync(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2) r1 = socket(0x23, 0x3, 0x401) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x3202cc6, 0x4) r2 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ff3000/0xa000)=nil, 0xa000}, 0x1}) mmap$usbmon(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x110, r0, 0x401) [ 3196.917900][ T3432] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3196.925710][ T3432] RBP: 00007fc69efa2120 R08: 0000000000000003 R09: 0000000000000000 [ 3196.933522][ T3432] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3196.941334][ T3432] R13: 000000000000000b R14: 00007fc69e39bf80 R15: 00007ffd81d6c3c8 [ 3196.949160][ T3432] 23:38:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x4100010, r1, 0x10000000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x26}, 0xf073}, {0xa, 0x4e20, 0x1, @private1, 0x3823}, 0x1, {[0x8000, 0x101, 0x81, 0x3, 0x3e54, 0xc6, 0xffffff92, 0x4]}}, 0x5c) getgroups(0x7, &(0x7f0000000000)=[0xee00, 0x0, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01]) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x1, {0x0, 0x1, 0x1}, 0x8d, 0xffffffffffffffff, r2, 0x4, 0x0, 0x1ff, 0x200, 0x9, 0x0, 0xb5, 0x0, 0x4, 0xffffffffffff0780, 0x3ff, 0x7, 0x100, 0x0, 0xfffffffffffffffc}}, 0xa0) 23:38:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) inotify_rm_watch(0xffffffffffffffff, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20efe002) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, r1, 0x4) 23:38:24 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x10a00) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000040)=""/252, 0xfc, 0x0, &(0x7f0000000140)=""/201, 0xc9}}, 0x10) (rerun: 64) 23:38:24 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1f00) 23:38:24 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) msync(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2) r1 = socket(0x23, 0x3, 0x401) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x3202cc6, 0x4) r2 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ff3000/0xa000)=nil, 0xa000}, 0x1}) mmap$usbmon(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x110, r0, 0x401) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) pipe2(&(0x7f0000000080), 0x4000) (async) msync(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2) (async) socket(0x23, 0x3, 0x401) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r0, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x3202cc6, 0x4) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ff3000/0xa000)=nil, 0xa000}, 0x1}) (async) mmap$usbmon(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x110, r0, 0x401) (async) 23:38:24 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000) [ 3197.006806][ T3473] FAULT_INJECTION: forcing a failure. [ 3197.006806][ T3473] name failslab, interval 1, probability 0, space 0, times 0 [ 3197.033069][ T3473] CPU: 1 PID: 3473 Comm: syz-executor.3 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3197.043003][ T3473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3197.052889][ T3473] Call Trace: 23:38:24 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) msync(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x2) (async) r1 = socket(0x23, 0x3, 0x401) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000c, 0x12, r0, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x3202cc6, 0x4) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ff3000/0xa000)=nil, 0xa000}, 0x1}) mmap$usbmon(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x110, r0, 0x401) 23:38:24 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2100) 23:38:24 executing program 2: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 23:38:24 executing program 2: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) [ 3197.056008][ T3473] [ 3197.058788][ T3473] dump_stack_lvl+0x151/0x1b7 [ 3197.063301][ T3473] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3197.068607][ T3473] ? __kernel_text_address+0xd/0x40 [ 3197.073630][ T3473] ? arch_stack_walk+0xf3/0x140 [ 3197.078317][ T3473] dump_stack+0x15/0x18 [ 3197.082308][ T3473] should_fail_ex+0x3d0/0x520 [ 3197.086825][ T3473] ? mas_alloc_nodes+0x267/0x7d0 [ 3197.091604][ T3473] __should_failslab+0xaf/0xf0 [ 3197.096295][ T3473] should_failslab+0x9/0x20 [ 3197.100633][ T3473] kmem_cache_alloc+0x3b/0x2c0 [ 3197.105246][ T3473] mas_alloc_nodes+0x267/0x7d0 [ 3197.109839][ T3473] mas_preallocate+0xef2/0x1bd0 [ 3197.114529][ T3473] ? mas_destroy+0x3280/0x3280 [ 3197.119118][ T3473] ? rwsem_write_trylock+0x15b/0x290 [ 3197.124239][ T3473] __vma_adjust+0x6aa/0x1fe0 [ 3197.128662][ T3473] ? vma_start_write+0x160/0x160 [ 3197.133430][ T3473] ? rwsem_write_trylock+0x15b/0x290 [ 3197.138558][ T3473] __split_vma+0x619/0x880 [ 3197.142806][ T3473] do_mas_align_munmap+0x3bf/0x1400 [ 3197.147839][ T3473] ? kernel_text_address+0xa9/0xe0 [ 3197.152788][ T3473] ? __kernel_text_address+0xd/0x40 [ 3197.157846][ T3473] ? avc_has_perm_noaudit+0x348/0x430 [ 3197.163046][ T3473] ? do_mas_munmap+0x2b0/0x2b0 [ 3197.167632][ T3473] ? mas_find+0x4e4/0x520 [ 3197.171795][ T3473] do_mas_munmap+0x23e/0x2b0 [ 3197.176221][ T3473] mmap_region+0x75c/0x2390 [ 3197.180565][ T3473] ? file_mmap_ok+0x150/0x150 [ 3197.185075][ T3473] ? cap_mmap_addr+0x169/0x2e0 [ 3197.189673][ T3473] ? __kasan_check_read+0x11/0x20 [ 3197.194532][ T3473] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3197.200006][ T3473] ? arch_get_unmapped_area+0x780/0x780 [ 3197.205389][ T3473] ? file_mmap_ok+0x104/0x150 [ 3197.209897][ T3473] do_mmap+0x853/0xe30 [ 3197.213807][ T3473] ? mlock_future_check+0x110/0x110 [ 3197.218837][ T3473] vm_mmap_pgoff+0x208/0x430 [ 3197.223274][ T3473] ? account_locked_vm+0x250/0x250 [ 3197.228206][ T3473] ? __fget_files+0x2cb/0x330 [ 3197.232730][ T3473] ksys_mmap_pgoff+0x15d/0x1e0 [ 3197.237324][ T3473] __x64_sys_mmap+0x103/0x120 [ 3197.241836][ T3473] do_syscall_64+0x3d/0xb0 [ 3197.246095][ T3473] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3197.251818][ T3473] RIP: 0033:0x7fc69e27cae9 [ 3197.256072][ T3473] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3197.275512][ T3473] RSP: 002b:00007fc69efa20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3197.283756][ T3473] RAX: ffffffffffffffda RBX: 00007fc69e39bf80 RCX: 00007fc69e27cae9 [ 3197.291571][ T3473] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3197.299380][ T3473] RBP: 00007fc69efa2120 R08: 0000000000000003 R09: 0000000000000000 23:38:24 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 5) 23:38:24 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2200) 23:38:24 executing program 2: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 23:38:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7fff, 0x12080) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x810, 0xffffffffffffffff, 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) 23:38:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x4100010, r1, 0x10000000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x26}, 0xf073}, {0xa, 0x4e20, 0x1, @private1, 0x3823}, 0x1, {[0x8000, 0x101, 0x81, 0x3, 0x3e54, 0xc6, 0xffffff92, 0x4]}}, 0x5c) getgroups(0x7, &(0x7f0000000000)=[0xee00, 0x0, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01]) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x1, {0x0, 0x1, 0x1}, 0x8d, 0xffffffffffffffff, r2, 0x4, 0x0, 0x1ff, 0x200, 0x9, 0x0, 0xb5, 0x0, 0x4, 0xffffffffffff0780, 0x3ff, 0x7, 0x100, 0x0, 0xfffffffffffffffc}}, 0xa0) (async) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x1, {0x0, 0x1, 0x1}, 0x8d, 0xffffffffffffffff, r2, 0x4, 0x0, 0x1ff, 0x200, 0x9, 0x0, 0xb5, 0x0, 0x4, 0xffffffffffff0780, 0x3ff, 0x7, 0x100, 0x0, 0xfffffffffffffffc}}, 0xa0) 23:38:24 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffefffffd, 0x533880) 23:38:24 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2300) 23:38:24 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0x4100010, r1, 0x10000000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x26}, 0xf073}, {0xa, 0x4e20, 0x1, @private1, 0x3823}, 0x1, {[0x8000, 0x101, 0x81, 0x3, 0x3e54, 0xc6, 0xffffff92, 0x4]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e20, 0x81, @dev={0xfe, 0x80, '\x00', 0x26}, 0xf073}, {0xa, 0x4e20, 0x1, @private1, 0x3823}, 0x1, {[0x8000, 0x101, 0x81, 0x3, 0x3e54, 0xc6, 0xffffff92, 0x4]}}, 0x5c) getgroups(0x7, &(0x7f0000000000)=[0xee00, 0x0, 0x0, 0xee01, 0xee01, 0xffffffffffffffff, 0xee01]) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x19, 0x1, {0x1, {0x0, 0x1, 0x1}, 0x8d, 0xffffffffffffffff, r2, 0x4, 0x0, 0x1ff, 0x200, 0x9, 0x0, 0xb5, 0x0, 0x4, 0xffffffffffff0780, 0x3ff, 0x7, 0x100, 0x0, 0xfffffffffffffffc}}, 0xa0) 23:38:24 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffefffffd, 0x533880) syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffefffffd, 0x533880) (async) 23:38:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7fff, 0x12080) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x810, 0xffffffffffffffff, 0x7) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async, rerun: 32) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) [ 3197.307190][ T3473] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3197.315001][ T3473] R13: 000000000000000b R14: 00007fc69e39bf80 R15: 00007ffd81d6c3c8 [ 3197.322820][ T3473] 23:38:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x10, r1, 0x10000000) 23:38:24 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x60ff) [ 3197.366818][ T3529] FAULT_INJECTION: forcing a failure. [ 3197.366818][ T3529] name failslab, interval 1, probability 0, space 0, times 0 [ 3197.387856][ T3529] CPU: 1 PID: 3529 Comm: syz-executor.3 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3197.397779][ T3529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3197.407674][ T3529] Call Trace: [ 3197.410810][ T3529] [ 3197.413577][ T3529] dump_stack_lvl+0x151/0x1b7 [ 3197.418095][ T3529] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3197.423382][ T3529] dump_stack+0x15/0x18 [ 3197.427365][ T3529] should_fail_ex+0x3d0/0x520 [ 3197.431883][ T3529] __should_failslab+0xaf/0xf0 [ 3197.436482][ T3529] should_failslab+0x9/0x20 [ 3197.440832][ T3529] kmem_cache_alloc_bulk+0x2e/0x3d0 [ 3197.445861][ T3529] mas_alloc_nodes+0x3ce/0x7d0 [ 3197.450458][ T3529] mas_preallocate+0xef2/0x1bd0 [ 3197.455146][ T3529] ? mas_destroy+0x3280/0x3280 [ 3197.459741][ T3529] ? rwsem_write_trylock+0x15b/0x290 [ 3197.464866][ T3529] __vma_adjust+0x6aa/0x1fe0 [ 3197.469295][ T3529] ? vma_start_write+0x160/0x160 [ 3197.474061][ T3529] ? rwsem_write_trylock+0x15b/0x290 [ 3197.479187][ T3529] __split_vma+0x619/0x880 [ 3197.483440][ T3529] do_mas_align_munmap+0x3bf/0x1400 [ 3197.488469][ T3529] ? kernel_text_address+0xa9/0xe0 [ 3197.493417][ T3529] ? __kernel_text_address+0xd/0x40 [ 3197.498450][ T3529] ? avc_has_perm_noaudit+0x348/0x430 [ 3197.503675][ T3529] ? do_mas_munmap+0x2b0/0x2b0 [ 3197.508269][ T3529] ? mas_find+0x4e4/0x520 [ 3197.512430][ T3529] do_mas_munmap+0x23e/0x2b0 [ 3197.516852][ T3529] mmap_region+0x75c/0x2390 [ 3197.521196][ T3529] ? file_mmap_ok+0x150/0x150 [ 3197.525703][ T3529] ? cap_mmap_addr+0x169/0x2e0 [ 3197.530304][ T3529] ? __kasan_check_read+0x11/0x20 [ 3197.535161][ T3529] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3197.540630][ T3529] ? arch_get_unmapped_area+0x780/0x780 [ 3197.546016][ T3529] ? file_mmap_ok+0x104/0x150 [ 3197.550540][ T3529] do_mmap+0x853/0xe30 [ 3197.554432][ T3529] ? mlock_future_check+0x110/0x110 [ 3197.559468][ T3529] vm_mmap_pgoff+0x208/0x430 [ 3197.563893][ T3529] ? account_locked_vm+0x250/0x250 [ 3197.568840][ T3529] ? __fget_files+0x2cb/0x330 [ 3197.573353][ T3529] ksys_mmap_pgoff+0x15d/0x1e0 [ 3197.577953][ T3529] __x64_sys_mmap+0x103/0x120 [ 3197.582581][ T3529] do_syscall_64+0x3d/0xb0 [ 3197.586830][ T3529] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3197.592562][ T3529] RIP: 0033:0x7fc69e27cae9 [ 3197.596827][ T3529] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 23:38:24 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 6) 23:38:24 executing program 0: syz_open_dev$usbmon(&(0x7f0000000040), 0x7fff, 0x12080) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x7fff, 0x12080) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000009, 0x810, 0xffffffffffffffff, 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) 23:38:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x10, r1, 0x10000000) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) pipe2(&(0x7f0000000000), 0x84800) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x10, r1, 0x10000000) (async) 23:38:24 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7bff) 23:38:24 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffefffffd, 0x533880) syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffefffffd, 0x533880) (async) [ 3197.616255][ T3529] RSP: 002b:00007fc69efa20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3197.624500][ T3529] RAX: ffffffffffffffda RBX: 00007fc69e39bf80 RCX: 00007fc69e27cae9 [ 3197.632310][ T3529] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3197.640125][ T3529] RBP: 00007fc69efa2120 R08: 0000000000000003 R09: 0000000000000000 [ 3197.647932][ T3529] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3197.655747][ T3529] R13: 000000000000000b R14: 00007fc69e39bf80 R15: 00007ffd81d6c3c8 [ 3197.663563][ T3529] 23:38:24 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) 23:38:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x10, r1, 0x10000000) 23:38:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe2(&(0x7f0000000000), 0x84800) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x10, r1, 0x10000000) 23:38:24 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf0ff) 23:38:24 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) 23:38:24 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf2ff) 23:38:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x110, r1, 0x10000000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 3197.692683][ T3558] FAULT_INJECTION: forcing a failure. [ 3197.692683][ T3558] name failslab, interval 1, probability 0, space 0, times 0 23:38:24 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 7) 23:38:24 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 1) 23:38:24 executing program 1: getgroups(0x1, &(0x7f0000000000)=[0xee01]) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = userfaultfd(0xc0801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x4, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), 0x0, r1}, 0x68) r3 = userfaultfd(0x1) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000a2bb482b80681ea800000004000000000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r9, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r9, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000500)={'gretap0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x7fffffff, 0x9, {{0x3d, 0x4, 0x1, 0x4, 0xf4, 0x64, 0x0, 0x58, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x5e, 0x1, 0x8, [{@multicast1, 0x5e}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@local, 0xfffffbff}, {@rand_addr=0x64010102, 0x6}, {@empty, 0xf5}, {@loopback, 0x92a0b1f0}, {@rand_addr=0x64010101, 0x47a7}]}, @generic={0x44, 0x8, "ed5e34b4b082"}, @timestamp={0x44, 0x18, 0xf8, 0x0, 0x0, [0x10001, 0x7fff, 0xfffffbb8, 0x1, 0x10001]}, @cipso={0x86, 0x38, 0x3, [{0x0, 0x12, "018bbd575e775a950d308b8e220f14d7"}, {0x5, 0xa, "72c44be829f8645c"}, {0x5, 0x10, "662bcbfec670a37d24364851a6ce"}, {0x6, 0x6, "07e504dd"}]}, @end, @end, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x4, [{@multicast2, 0x7}, {@remote, 0x1}]}, @rr={0x7, 0x1b, 0xbd, [@loopback, @broadcast, @rand_addr=0x64010102, @private=0xa010101, @local, @local]}, @rr={0x7, 0x13, 0x57, [@private=0xa010102, @remote, @multicast1, @private=0xa010100]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x520, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xd8, 0x81, 0x7, 0x100}, {0x7, 0x7f, 0x8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x520}, 0x1, 0x0, 0x0, 0x40000a4}, 0x4000001) 23:38:24 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xff7b) 23:38:24 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) 23:38:25 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) 23:38:25 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfff0) 23:38:25 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 2) [ 3197.743446][ T3558] CPU: 1 PID: 3558 Comm: syz-executor.3 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3197.753464][ T3558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3197.763361][ T3558] Call Trace: [ 3197.763373][ T3558] [ 3197.763379][ T3558] dump_stack_lvl+0x151/0x1b7 23:38:25 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 8) [ 3197.763406][ T3558] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3197.763427][ T3558] ? do_mas_munmap+0x2b0/0x2b0 [ 3197.763451][ T3558] dump_stack+0x15/0x18 [ 3197.763469][ T3558] should_fail_ex+0x3d0/0x520 [ 3197.763487][ T3558] ? vm_area_alloc+0x24/0x1b0 [ 3197.763506][ T3558] __should_failslab+0xaf/0xf0 [ 3197.763536][ T3558] should_failslab+0x9/0x20 [ 3197.763554][ T3558] kmem_cache_alloc+0x3b/0x2c0 [ 3197.763578][ T3558] vm_area_alloc+0x24/0x1b0 [ 3197.763596][ T3558] mmap_region+0xf01/0x2390 [ 3197.763623][ T3558] ? file_mmap_ok+0x150/0x150 [ 3197.763644][ T3558] ? cap_mmap_addr+0x169/0x2e0 [ 3197.763661][ T3558] ? __kasan_check_read+0x11/0x20 [ 3197.763681][ T3558] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3197.763706][ T3558] ? arch_get_unmapped_area+0x780/0x780 [ 3197.763731][ T3558] ? file_mmap_ok+0x104/0x150 [ 3197.763752][ T3558] do_mmap+0x853/0xe30 [ 3197.763774][ T3558] ? mlock_future_check+0x110/0x110 [ 3197.763798][ T3558] vm_mmap_pgoff+0x208/0x430 [ 3197.763817][ T3558] ? account_locked_vm+0x250/0x250 [ 3197.763834][ T3558] ? __fget_files+0x2cb/0x330 [ 3197.763854][ T3558] ksys_mmap_pgoff+0x15d/0x1e0 [ 3197.763876][ T3558] __x64_sys_mmap+0x103/0x120 [ 3197.763898][ T3558] do_syscall_64+0x3d/0xb0 [ 3197.763916][ T3558] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3197.763934][ T3558] RIP: 0033:0x7fc69e27cae9 [ 3197.763948][ T3558] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 23:38:25 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) [ 3197.763962][ T3558] RSP: 002b:00007fc69efa20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3197.763980][ T3558] RAX: ffffffffffffffda RBX: 00007fc69e39bf80 RCX: 00007fc69e27cae9 [ 3197.763992][ T3558] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3197.764002][ T3558] RBP: 00007fc69efa2120 R08: 0000000000000003 R09: 0000000000000000 [ 3197.764012][ T3558] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3197.764022][ T3558] R13: 000000000000000b R14: 00007fc69e39bf80 R15: 00007ffd81d6c3c8 [ 3197.764036][ T3558] [ 3197.780660][ T3578] FAULT_INJECTION: forcing a failure. [ 3197.780660][ T3578] name failslab, interval 1, probability 0, space 0, times 0 [ 3197.780693][ T3578] CPU: 1 PID: 3578 Comm: syz-executor.0 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3197.780716][ T3578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3197.780729][ T3578] Call Trace: [ 3197.780736][ T3578] [ 3197.780744][ T3578] dump_stack_lvl+0x151/0x1b7 [ 3197.780778][ T3578] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3197.780808][ T3578] dump_stack+0x15/0x18 [ 3197.780832][ T3578] should_fail_ex+0x3d0/0x520 [ 3197.780865][ T3578] ? vm_area_dup+0x27/0x290 [ 3197.780891][ T3578] __should_failslab+0xaf/0xf0 [ 3197.780924][ T3578] should_failslab+0x9/0x20 [ 3197.780948][ T3578] kmem_cache_alloc+0x3b/0x2c0 [ 3197.780981][ T3578] vm_area_dup+0x27/0x290 [ 3197.781005][ T3578] ? __split_vma+0x19a/0x880 [ 3197.781034][ T3578] __split_vma+0x1ba/0x880 [ 3197.781066][ T3578] do_mas_align_munmap+0x3bf/0x1400 [ 3197.781096][ T3578] ? kernel_text_address+0xa9/0xe0 [ 3197.781130][ T3578] ? __kernel_text_address+0xd/0x40 [ 3197.781164][ T3578] ? avc_has_perm_noaudit+0x348/0x430 [ 3197.781189][ T3578] ? do_mas_munmap+0x2b0/0x2b0 [ 3197.781222][ T3578] ? mas_find+0x4e4/0x520 [ 3197.781251][ T3578] do_mas_munmap+0x23e/0x2b0 [ 3197.781281][ T3578] mmap_region+0x75c/0x2390 [ 3197.781315][ T3578] ? file_mmap_ok+0x150/0x150 [ 3197.781344][ T3578] ? cap_mmap_addr+0x169/0x2e0 [ 3197.781365][ T3578] ? __kasan_check_read+0x11/0x20 [ 3197.781392][ T3578] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3197.781426][ T3578] ? arch_get_unmapped_area+0x780/0x780 [ 3197.781459][ T3578] ? file_mmap_ok+0x104/0x150 [ 3197.781486][ T3578] do_mmap+0x853/0xe30 [ 3197.781516][ T3578] ? mlock_future_check+0x110/0x110 [ 3197.781557][ T3578] vm_mmap_pgoff+0x208/0x430 [ 3197.781582][ T3578] ? account_locked_vm+0x250/0x250 [ 3197.781606][ T3578] ? __fget_files+0x2cb/0x330 [ 3197.781635][ T3578] ksys_mmap_pgoff+0x15d/0x1e0 [ 3197.781665][ T3578] __x64_sys_mmap+0x103/0x120 [ 3197.781695][ T3578] do_syscall_64+0x3d/0xb0 [ 3197.781719][ T3578] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3197.781743][ T3578] RIP: 0033:0x7f37eac7cae9 [ 3197.781761][ T3578] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3197.781780][ T3578] RSP: 002b:00007f37eb9c30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3197.781805][ T3578] RAX: ffffffffffffffda RBX: 00007f37ead9bf80 RCX: 00007f37eac7cae9 [ 3197.781822][ T3578] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3197.781836][ T3578] RBP: 00007f37eb9c3120 R08: 0000000000000003 R09: 0000000000000000 [ 3197.781850][ T3578] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3197.781863][ T3578] R13: 000000000000000b R14: 00007f37ead9bf80 R15: 00007fff7b342df8 [ 3197.781883][ T3578] [ 3197.790712][ T3583] FAULT_INJECTION: forcing a failure. [ 3197.790712][ T3583] name failslab, interval 1, probability 0, space 0, times 0 [ 3197.790745][ T3583] CPU: 1 PID: 3583 Comm: syz-executor.3 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3197.790771][ T3583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3197.790786][ T3583] Call Trace: [ 3197.790794][ T3583] [ 3197.790802][ T3583] dump_stack_lvl+0x151/0x1b7 [ 3197.790836][ T3583] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3197.790874][ T3583] ? vm_area_alloc+0x24/0x1b0 [ 3197.790904][ T3583] dump_stack+0x15/0x18 [ 3197.790928][ T3583] should_fail_ex+0x3d0/0x520 [ 3197.790955][ T3583] ? vm_area_alloc+0xea/0x1b0 [ 3197.790980][ T3583] __should_failslab+0xaf/0xf0 [ 3197.791012][ T3583] should_failslab+0x9/0x20 [ 3197.791035][ T3583] kmem_cache_alloc+0x3b/0x2c0 [ 3197.791067][ T3583] vm_area_alloc+0xea/0x1b0 [ 3197.791092][ T3583] mmap_region+0xf01/0x2390 [ 3197.791127][ T3583] ? file_mmap_ok+0x150/0x150 [ 3197.791156][ T3583] ? cap_mmap_addr+0x169/0x2e0 [ 3197.791178][ T3583] ? __kasan_check_read+0x11/0x20 [ 3197.791206][ T3583] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3197.791239][ T3583] ? arch_get_unmapped_area+0x780/0x780 [ 3197.791271][ T3583] ? file_mmap_ok+0x104/0x150 [ 3197.791299][ T3583] do_mmap+0x853/0xe30 [ 3197.791326][ T3583] ? mlock_future_check+0x110/0x110 [ 3197.791357][ T3583] vm_mmap_pgoff+0x208/0x430 [ 3197.791382][ T3583] ? account_locked_vm+0x250/0x250 [ 3197.791403][ T3583] ? __fget_files+0x2cb/0x330 [ 3197.791429][ T3583] ksys_mmap_pgoff+0x15d/0x1e0 [ 3197.791458][ T3583] __x64_sys_mmap+0x103/0x120 [ 3197.791486][ T3583] do_syscall_64+0x3d/0xb0 [ 3197.791511][ T3583] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3197.791545][ T3583] RIP: 0033:0x7fc69e27cae9 [ 3197.791563][ T3583] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3197.791584][ T3583] RSP: 002b:00007fc69efa20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3197.791609][ T3583] RAX: ffffffffffffffda RBX: 00007fc69e39bf80 RCX: 00007fc69e27cae9 [ 3197.791627][ T3583] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3197.791641][ T3583] RBP: 00007fc69efa2120 R08: 0000000000000003 R09: 0000000000000000 [ 3197.791655][ T3583] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3197.791669][ T3583] R13: 000000000000000b R14: 00007fc69e39bf80 R15: 00007ffd81d6c3c8 [ 3197.791690][ T3583] [ 3197.818085][ T3592] FAULT_INJECTION: forcing a failure. [ 3197.818085][ T3592] name failslab, interval 1, probability 0, space 0, times 0 [ 3197.818120][ T3592] CPU: 0 PID: 3592 Comm: syz-executor.0 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3197.818145][ T3592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3197.818159][ T3592] Call Trace: [ 3197.818166][ T3592] [ 3197.818174][ T3592] dump_stack_lvl+0x151/0x1b7 [ 3197.818208][ T3592] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3197.818237][ T3592] ? vm_area_dup+0x27/0x290 [ 3197.818264][ T3592] dump_stack+0x15/0x18 [ 3197.818286][ T3592] should_fail_ex+0x3d0/0x520 [ 3197.818311][ T3592] ? vm_area_dup+0x65/0x290 [ 3197.818336][ T3592] __should_failslab+0xaf/0xf0 [ 3197.818369][ T3592] should_failslab+0x9/0x20 [ 3197.818392][ T3592] kmem_cache_alloc+0x3b/0x2c0 [ 3197.818429][ T3592] vm_area_dup+0x65/0x290 [ 3197.818454][ T3592] __split_vma+0x1ba/0x880 [ 3197.818487][ T3592] do_mas_align_munmap+0x3bf/0x1400 [ 3197.818515][ T3592] ? kernel_text_address+0xa9/0xe0 [ 3197.818550][ T3592] ? __kernel_text_address+0xd/0x40 [ 3197.818585][ T3592] ? avc_has_perm_noaudit+0x348/0x430 [ 3197.818611][ T3592] ? do_mas_munmap+0x2b0/0x2b0 [ 3197.818644][ T3592] ? mas_find+0x4e4/0x520 [ 3197.818671][ T3592] do_mas_munmap+0x23e/0x2b0 [ 3197.818701][ T3592] mmap_region+0x75c/0x2390 [ 3197.818735][ T3592] ? file_mmap_ok+0x150/0x150 [ 3197.818763][ T3592] ? cap_mmap_addr+0x169/0x2e0 [ 3197.818784][ T3592] ? __kasan_check_read+0x11/0x20 [ 3197.818811][ T3592] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3197.818844][ T3592] ? arch_get_unmapped_area+0x780/0x780 [ 3197.818875][ T3592] ? file_mmap_ok+0x104/0x150 [ 3197.818903][ T3592] do_mmap+0x853/0xe30 [ 3197.818930][ T3592] ? mlock_future_check+0x110/0x110 [ 3197.818962][ T3592] vm_mmap_pgoff+0x208/0x430 [ 3197.818986][ T3592] ? account_locked_vm+0x250/0x250 [ 3197.819009][ T3592] ? __fget_files+0x2cb/0x330 [ 3197.819047][ T3592] ksys_mmap_pgoff+0x15d/0x1e0 [ 3197.836328][ T3594] FAULT_INJECTION: forcing a failure. [ 3197.836328][ T3594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3197.836646][ T3592] __x64_sys_mmap+0x103/0x120 [ 3198.702273][ T3592] do_syscall_64+0x3d/0xb0 [ 3198.702309][ T3592] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3198.702334][ T3592] RIP: 0033:0x7f37eac7cae9 [ 3198.702350][ T3592] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3198.702385][ T3592] RSP: 002b:00007f37eb9c30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3198.702408][ T3592] RAX: ffffffffffffffda RBX: 00007f37ead9bf80 RCX: 00007f37eac7cae9 [ 3198.702424][ T3592] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3198.702440][ T3592] RBP: 00007f37eb9c3120 R08: 0000000000000003 R09: 0000000000000000 [ 3198.702455][ T3592] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3198.702471][ T3592] R13: 000000000000000b R14: 00007f37ead9bf80 R15: 00007fff7b342df8 [ 3198.702494][ T3592] [ 3198.702503][ T3594] CPU: 1 PID: 3594 Comm: syz-executor.3 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3198.702531][ T3594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3198.702544][ T3594] Call Trace: [ 3198.702552][ T3594] [ 3198.702559][ T3594] dump_stack_lvl+0x151/0x1b7 [ 3198.702587][ T3594] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3198.702614][ T3594] dump_stack+0x15/0x18 [ 3198.702637][ T3594] should_fail_ex+0x3d0/0x520 [ 3198.702661][ T3594] should_fail+0xb/0x10 [ 3198.702681][ T3594] should_fail_usercopy+0x1a/0x20 [ 3198.702702][ T3594] _copy_to_user+0x1e/0x90 [ 3198.702732][ T3594] simple_read_from_buffer+0xc7/0x150 [ 3198.702758][ T3594] proc_fail_nth_read+0x1a3/0x210 [ 3198.702779][ T3594] ? proc_fault_inject_write+0x390/0x390 [ 3198.702800][ T3594] ? fsnotify_perm+0x470/0x5d0 [ 3198.863960][ T3594] ? security_file_permission+0x86/0xb0 [ 3198.869335][ T3594] ? proc_fault_inject_write+0x390/0x390 [ 3198.874807][ T3594] vfs_read+0x26c/0xad0 [ 3198.878799][ T3594] ? kernel_read+0x1f0/0x1f0 [ 3198.883220][ T3594] ? mutex_lock+0xb1/0x1e0 [ 3198.887479][ T3594] ? bit_wait_io_timeout+0x120/0x120 [ 3198.892597][ T3594] ? __fdget_pos+0x22e/0x2c0 [ 3198.897018][ T3594] ? ksys_read+0x77/0x2c0 [ 3198.901186][ T3594] ksys_read+0x199/0x2c0 [ 3198.905267][ T3594] ? vfs_write+0xeb0/0xeb0 [ 3198.909522][ T3594] ? debug_smp_processor_id+0x17/0x20 [ 3198.914727][ T3594] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3198.920630][ T3594] __x64_sys_read+0x7b/0x90 [ 3198.924971][ T3594] do_syscall_64+0x3d/0xb0 [ 3198.929221][ T3594] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3198.934948][ T3594] RIP: 0033:0x7fc69e27b78c [ 3198.939201][ T3594] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 23:38:26 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfff2) 23:38:26 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x110, r1, 0x10000000) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:26 executing program 1: getgroups(0x1, &(0x7f0000000000)=[0xee01]) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = userfaultfd(0xc0801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) (async, rerun: 32) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x4, 0x4) (rerun: 32) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), 0x0, r1}, 0x68) (async) r3 = userfaultfd(0x1) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000a2bb482b80681ea800000004000000000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r9, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r9, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000500)={'gretap0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x7fffffff, 0x9, {{0x3d, 0x4, 0x1, 0x4, 0xf4, 0x64, 0x0, 0x58, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x5e, 0x1, 0x8, [{@multicast1, 0x5e}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@local, 0xfffffbff}, {@rand_addr=0x64010102, 0x6}, {@empty, 0xf5}, {@loopback, 0x92a0b1f0}, {@rand_addr=0x64010101, 0x47a7}]}, @generic={0x44, 0x8, "ed5e34b4b082"}, @timestamp={0x44, 0x18, 0xf8, 0x0, 0x0, [0x10001, 0x7fff, 0xfffffbb8, 0x1, 0x10001]}, @cipso={0x86, 0x38, 0x3, [{0x0, 0x12, "018bbd575e775a950d308b8e220f14d7"}, {0x5, 0xa, "72c44be829f8645c"}, {0x5, 0x10, "662bcbfec670a37d24364851a6ce"}, {0x6, 0x6, "07e504dd"}]}, @end, @end, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x4, [{@multicast2, 0x7}, {@remote, 0x1}]}, @rr={0x7, 0x1b, 0xbd, [@loopback, @broadcast, @rand_addr=0x64010102, @private=0xa010101, @local, @local]}, @rr={0x7, 0x13, 0x57, [@private=0xa010102, @remote, @multicast1, @private=0xa010100]}]}}}}}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x520, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xd8, 0x81, 0x7, 0x100}, {0x7, 0x7f, 0x8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x520}, 0x1, 0x0, 0x0, 0x40000a4}, 0x4000001) 23:38:26 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x110, r1, 0x10000000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x110, r1, 0x10000000) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) 23:38:26 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x40004) 23:38:26 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) [ 3198.958728][ T3594] RSP: 002b:00007fc69efa20c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3198.966976][ T3594] RAX: ffffffffffffffda RBX: 00007fc69e39bf80 RCX: 00007fc69e27b78c [ 3198.974971][ T3594] RDX: 000000000000000f RSI: 00007fc69efa2130 RDI: 0000000000000004 [ 3198.982783][ T3594] RBP: 00007fc69efa2120 R08: 0000000000000000 R09: 0000000000000000 [ 3198.990603][ T3594] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3198.998422][ T3594] R13: 000000000000000b R14: 00007fc69e39bf80 R15: 00007ffd81d6c3c8 [ 3199.006225][ T3594] 23:38:26 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 3) 23:38:26 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe0ff20) 23:38:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:26 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x12, r0, 0xfffffffffffffffe) 23:38:26 executing program 1: getgroups(0x1, &(0x7f0000000000)=[0xee01]) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = userfaultfd(0xc0801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x4, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), 0x0, r1}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), 0x0, r1}, 0x68) r3 = userfaultfd(0x1) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) (async) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000a2bb482b80681ea800000004000000000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000a2bb482b80681ea800000004000000000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r9, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r9, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r9, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000500)={'gretap0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x7fffffff, 0x9, {{0x3d, 0x4, 0x1, 0x4, 0xf4, 0x64, 0x0, 0x58, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x5e, 0x1, 0x8, [{@multicast1, 0x5e}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@local, 0xfffffbff}, {@rand_addr=0x64010102, 0x6}, {@empty, 0xf5}, {@loopback, 0x92a0b1f0}, {@rand_addr=0x64010101, 0x47a7}]}, @generic={0x44, 0x8, "ed5e34b4b082"}, @timestamp={0x44, 0x18, 0xf8, 0x0, 0x0, [0x10001, 0x7fff, 0xfffffbb8, 0x1, 0x10001]}, @cipso={0x86, 0x38, 0x3, [{0x0, 0x12, "018bbd575e775a950d308b8e220f14d7"}, {0x5, 0xa, "72c44be829f8645c"}, {0x5, 0x10, "662bcbfec670a37d24364851a6ce"}, {0x6, 0x6, "07e504dd"}]}, @end, @end, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x4, [{@multicast2, 0x7}, {@remote, 0x1}]}, @rr={0x7, 0x1b, 0xbd, [@loopback, @broadcast, @rand_addr=0x64010102, @private=0xa010101, @local, @local]}, @rr={0x7, 0x13, 0x57, [@private=0xa010102, @remote, @multicast1, @private=0xa010100]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)={0x520, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xd8, 0x81, 0x7, 0x100}, {0x7, 0x7f, 0x8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r9}, {0x140, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x520}, 0x1, 0x0, 0x0, 0x40000a4}, 0x4000001) 23:38:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x12, r0, 0x0) 23:38:26 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 4) 23:38:26 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf0ff20) 23:38:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2004, 0x0, 0x12, r0, 0x0) 23:38:26 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x2b) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x81, 0x101000) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r1, 0x40) [ 3199.117646][ T3637] FAULT_INJECTION: forcing a failure. [ 3199.117646][ T3637] name failslab, interval 1, probability 0, space 0, times 0 [ 3199.134526][ T3637] CPU: 0 PID: 3637 Comm: syz-executor.0 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3199.144447][ T3637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3199.154341][ T3637] Call Trace: [ 3199.157467][ T3637] [ 3199.160239][ T3637] dump_stack_lvl+0x151/0x1b7 23:38:26 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000bdbe00521bd061ee6fcc619b4d0047d783d48178d27f9324dbdbdbd7a70a47194c47f7303c7ab6ae90bb8da8d470b3b1d117518a1e5feaff4b9070d20c63c7af6e9b882e6fae6edc7ae7b989cde17d4ff7846e8b83b783b8bce8041d85abed36295cbf0ed969c6bb273144ca1ee7b55342bc5ffbb56a88eb18a7fe33b05c01795f1d6ecc2ffaa5cfbc82c54573361af148cbba15d62a49a5ec87c88cd766948643c34d3ea679547d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'gretap0\x00', r4, 0x10, 0x8000, 0x2, 0x7, {{0x2f, 0x4, 0x0, 0x15, 0xbc, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xd4, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xee02}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0x10001}, {@local, 0x800}, {@empty, 0x3c}]}, @cipso={0x86, 0x5c, 0x2, [{0x7, 0x6, "06e0c2ec"}, {0x1, 0x12, "01a7ffb7d86ba7cba5a8d048eb014799"}, {0x1, 0x12, "a3dfd2d4f93882d15e5f02741651f057"}, {0x0, 0x11, "4aaa0b42419400915850976fdb8258"}, {0x6, 0x7, "b789fe0b18"}, {0x6, 0xb, "19f13191c5d72d65a3"}, {0x2, 0x9, "e03b9c96a830b4"}]}, @timestamp_addr={0x44, 0x14, 0xa7, 0x1, 0xe, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}]}, @generic={0x82, 0x7, "9d67e56330"}, @end, @noop]}}}}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88000) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x3800, r1, &(0x7f00000001c0)="e797fa5ec763582fb91499e42fa4342ef63f94632bd346c65cb9b8435aab3291102419286ed1661cf3c737f15acad9e4965160285cb2dcb88cc560b464e37c1f3a7fb17ff8e311ca515d38896c82d285484d0e53f16cd9df1b2fafc658faffbf7a660f522574daf4a5805502", 0x6c, 0x8000, 0x0, 0x0, r7}, &(0x7f0000000140)) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000640)={'erspan0\x00', r5, 0x7800, 0x700, 0x8, 0x9, {{0x8, 0x4, 0x2, 0x29, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @loopback, {[@ssrr={0x89, 0xb, 0xc4, [@dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r12, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r13, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r13, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r14 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r14, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15}, 0x90) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000740)={0x560, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x885}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf9e}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfe1, 0x6, 0x9, 0x9}, {0x7, 0xff, 0x8}, {0xf9, 0x1f, 0xaf, 0xde4}, {0x81, 0xbc, 0x1, 0x9}, {0x5, 0x4, 0x6}, {0x7c38, 0x2, 0x3}, {0x9, 0x5, 0x6, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r13}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x764}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0x560}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, 0x0) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000180)=0x6, 0x4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4880004}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket(0x11, 0x1, 0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x533302) 23:38:26 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000) 23:38:26 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x2b) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x81, 0x101000) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r1, 0x40) 23:38:26 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (rerun: 64) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x12, r0, 0xfffffffffffffffe) 23:38:26 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x2b) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x81, 0x101000) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r1, 0x40) 23:38:26 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000) [ 3199.164758][ T3637] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3199.170050][ T3637] ? __kernel_text_address+0xd/0x40 [ 3199.175099][ T3637] ? arch_stack_walk+0xf3/0x140 [ 3199.179769][ T3637] dump_stack+0x15/0x18 [ 3199.183763][ T3637] should_fail_ex+0x3d0/0x520 [ 3199.188274][ T3637] ? mas_alloc_nodes+0x267/0x7d0 [ 3199.193049][ T3637] __should_failslab+0xaf/0xf0 [ 3199.197648][ T3637] should_failslab+0x9/0x20 [ 3199.201988][ T3637] kmem_cache_alloc+0x3b/0x2c0 [ 3199.206594][ T3637] mas_alloc_nodes+0x267/0x7d0 [ 3199.211194][ T3637] mas_preallocate+0xef2/0x1bd0 23:38:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2008, 0x0, 0x12, r0, 0x0) 23:38:26 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x200000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 3199.215878][ T3637] ? mas_destroy+0x3280/0x3280 [ 3199.220474][ T3637] ? rwsem_write_trylock+0x15b/0x290 [ 3199.225600][ T3637] __vma_adjust+0x6aa/0x1fe0 [ 3199.230026][ T3637] ? vma_start_write+0x160/0x160 [ 3199.234795][ T3637] ? rwsem_write_trylock+0x15b/0x290 [ 3199.239927][ T3637] __split_vma+0x619/0x880 [ 3199.244174][ T3637] do_mas_align_munmap+0x3bf/0x1400 [ 3199.249208][ T3637] ? kernel_text_address+0xa9/0xe0 [ 3199.254158][ T3637] ? __kernel_text_address+0xd/0x40 [ 3199.259210][ T3637] ? avc_has_perm_noaudit+0x348/0x430 23:38:26 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 5) 23:38:26 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000) 23:38:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x200a, 0x0, 0x12, r0, 0x0) 23:38:26 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 6) [ 3199.259247][ T3637] ? do_mas_munmap+0x2b0/0x2b0 [ 3199.259284][ T3637] ? mas_find+0x4e4/0x520 [ 3199.259314][ T3637] do_mas_munmap+0x23e/0x2b0 [ 3199.259344][ T3637] mmap_region+0x75c/0x2390 [ 3199.259379][ T3637] ? file_mmap_ok+0x150/0x150 [ 3199.259408][ T3637] ? cap_mmap_addr+0x169/0x2e0 [ 3199.259429][ T3637] ? __kasan_check_read+0x11/0x20 [ 3199.259457][ T3637] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3199.259490][ T3637] ? arch_get_unmapped_area+0x780/0x780 [ 3199.259523][ T3637] ? file_mmap_ok+0x104/0x150 [ 3199.259551][ T3637] do_mmap+0x853/0xe30 [ 3199.259579][ T3637] ? mlock_future_check+0x110/0x110 [ 3199.259611][ T3637] vm_mmap_pgoff+0x208/0x430 [ 3199.259637][ T3637] ? account_locked_vm+0x250/0x250 [ 3199.259661][ T3637] ? __fget_files+0x2cb/0x330 [ 3199.259689][ T3637] ksys_mmap_pgoff+0x15d/0x1e0 [ 3199.259719][ T3637] __x64_sys_mmap+0x103/0x120 [ 3199.259749][ T3637] do_syscall_64+0x3d/0xb0 [ 3199.259774][ T3637] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3199.259799][ T3637] RIP: 0033:0x7f37eac7cae9 [ 3199.259819][ T3637] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3199.259838][ T3637] RSP: 002b:00007f37eb9c30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3199.259864][ T3637] RAX: ffffffffffffffda RBX: 00007f37ead9bf80 RCX: 00007f37eac7cae9 [ 3199.259882][ T3637] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3199.259906][ T3637] RBP: 00007f37eb9c3120 R08: 0000000000000003 R09: 0000000000000000 [ 3199.259922][ T3637] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3199.259936][ T3637] R13: 000000000000000b R14: 00007f37ead9bf80 R15: 00007fff7b342df8 [ 3199.259957][ T3637] [ 3199.291593][ T3669] FAULT_INJECTION: forcing a failure. [ 3199.291593][ T3669] name failslab, interval 1, probability 0, space 0, times 0 [ 3199.291625][ T3669] CPU: 1 PID: 3669 Comm: syz-executor.0 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3199.291650][ T3669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3199.291664][ T3669] Call Trace: [ 3199.291671][ T3669] [ 3199.291679][ T3669] dump_stack_lvl+0x151/0x1b7 [ 3199.291712][ T3669] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3199.291744][ T3669] dump_stack+0x15/0x18 [ 3199.291768][ T3669] should_fail_ex+0x3d0/0x520 [ 3199.291793][ T3669] __should_failslab+0xaf/0xf0 [ 3199.291828][ T3669] should_failslab+0x9/0x20 [ 3199.291851][ T3669] kmem_cache_alloc_bulk+0x2e/0x3d0 [ 3199.291886][ T3669] mas_alloc_nodes+0x3ce/0x7d0 [ 3199.291915][ T3669] mas_preallocate+0xef2/0x1bd0 [ 3199.291947][ T3669] ? mas_destroy+0x3280/0x3280 [ 3199.291977][ T3669] ? rwsem_write_trylock+0x15b/0x290 [ 3199.292009][ T3669] __vma_adjust+0x6aa/0x1fe0 [ 3199.292044][ T3669] ? vma_start_write+0x160/0x160 [ 3199.292072][ T3669] ? rwsem_write_trylock+0x15b/0x290 [ 3199.292102][ T3669] __split_vma+0x619/0x880 [ 3199.292135][ T3669] do_mas_align_munmap+0x3bf/0x1400 [ 3199.292165][ T3669] ? kernel_text_address+0xa9/0xe0 [ 3199.292199][ T3669] ? __kernel_text_address+0xd/0x40 [ 3199.292234][ T3669] ? avc_has_perm_noaudit+0x348/0x430 [ 3199.292260][ T3669] ? do_mas_munmap+0x2b0/0x2b0 [ 3199.292294][ T3669] ? mas_find+0x4e4/0x520 [ 3199.292322][ T3669] do_mas_munmap+0x23e/0x2b0 [ 3199.292353][ T3669] mmap_region+0x75c/0x2390 [ 3199.292385][ T3669] ? file_mmap_ok+0x150/0x150 [ 3199.292422][ T3669] ? cap_mmap_addr+0x169/0x2e0 [ 3199.292444][ T3669] ? __kasan_check_read+0x11/0x20 [ 3199.292471][ T3669] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3199.292503][ T3669] ? arch_get_unmapped_area+0x780/0x780 [ 3199.292536][ T3669] ? file_mmap_ok+0x104/0x150 [ 3199.292564][ T3669] do_mmap+0x853/0xe30 [ 3199.292593][ T3669] ? mlock_future_check+0x110/0x110 [ 3199.292625][ T3669] vm_mmap_pgoff+0x208/0x430 [ 3199.292650][ T3669] ? account_locked_vm+0x250/0x250 [ 3199.292674][ T3669] ? __fget_files+0x2cb/0x330 [ 3199.292701][ T3669] ksys_mmap_pgoff+0x15d/0x1e0 [ 3199.292732][ T3669] __x64_sys_mmap+0x103/0x120 [ 3199.292761][ T3669] do_syscall_64+0x3d/0xb0 [ 3199.292786][ T3669] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3199.292811][ T3669] RIP: 0033:0x7f37eac7cae9 [ 3199.292829][ T3669] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3199.292848][ T3669] RSP: 002b:00007f37eb9c30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3199.292873][ T3669] RAX: ffffffffffffffda RBX: 00007f37ead9bf80 RCX: 00007f37eac7cae9 [ 3199.292890][ T3669] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3199.292905][ T3669] RBP: 00007f37eb9c3120 R08: 0000000000000003 R09: 0000000000000000 [ 3199.292918][ T3669] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3199.292932][ T3669] R13: 000000000000000b R14: 00007f37ead9bf80 R15: 00007fff7b342df8 [ 3199.292951][ T3669] [ 3199.327969][ T3675] FAULT_INJECTION: forcing a failure. [ 3199.327969][ T3675] name failslab, interval 1, probability 0, space 0, times 0 [ 3199.328001][ T3675] CPU: 0 PID: 3675 Comm: syz-executor.0 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3199.328025][ T3675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3199.328038][ T3675] Call Trace: [ 3199.328045][ T3675] [ 3199.328053][ T3675] dump_stack_lvl+0x151/0x1b7 [ 3199.328090][ T3675] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3199.328118][ T3675] ? do_mas_munmap+0x2b0/0x2b0 [ 3199.328150][ T3675] dump_stack+0x15/0x18 [ 3199.328174][ T3675] should_fail_ex+0x3d0/0x520 [ 3199.328199][ T3675] ? vm_area_alloc+0x24/0x1b0 [ 3199.328223][ T3675] __should_failslab+0xaf/0xf0 [ 3199.328255][ T3675] should_failslab+0x9/0x20 [ 3199.328278][ T3675] kmem_cache_alloc+0x3b/0x2c0 [ 3199.328309][ T3675] vm_area_alloc+0x24/0x1b0 [ 3199.328334][ T3675] mmap_region+0xf01/0x2390 [ 3199.328367][ T3675] ? file_mmap_ok+0x150/0x150 [ 3199.328396][ T3675] ? cap_mmap_addr+0x169/0x2e0 [ 3199.328417][ T3675] ? __kasan_check_read+0x11/0x20 [ 3199.328445][ T3675] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3199.328481][ T3675] ? arch_get_unmapped_area+0x780/0x780 [ 3199.328515][ T3675] ? file_mmap_ok+0x104/0x150 [ 3199.328544][ T3675] do_mmap+0x853/0xe30 [ 3199.328574][ T3675] ? mlock_future_check+0x110/0x110 [ 3199.328606][ T3675] vm_mmap_pgoff+0x208/0x430 [ 3199.328631][ T3675] ? account_locked_vm+0x250/0x250 [ 3199.328655][ T3675] ? __fget_files+0x2cb/0x330 [ 3199.328682][ T3675] ksys_mmap_pgoff+0x15d/0x1e0 [ 3199.328711][ T3675] __x64_sys_mmap+0x103/0x120 [ 3199.328739][ T3675] do_syscall_64+0x3d/0xb0 [ 3199.328764][ T3675] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3199.328788][ T3675] RIP: 0033:0x7f37eac7cae9 [ 3199.328806][ T3675] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3199.328824][ T3675] RSP: 002b:00007f37eb9c30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3199.328856][ T3675] RAX: ffffffffffffffda RBX: 00007f37ead9bf80 RCX: 00007f37eac7cae9 [ 3199.328873][ T3675] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3199.328888][ T3675] RBP: 00007f37eb9c3120 R08: 0000000000000003 R09: 0000000000000000 23:38:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x200000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x200000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000000) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x200d, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 7) 23:38:27 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x12, r0, 0xfffffffffffffffe) 23:38:27 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000bdbe00521bd061ee6fcc619b4d0047d783d48178d27f9324dbdbdbd7a70a47194c47f7303c7ab6ae90bb8da8d470b3b1d117518a1e5feaff4b9070d20c63c7af6e9b882e6fae6edc7ae7b989cde17d4ff7846e8b83b783b8bce8041d85abed36295cbf0ed969c6bb273144ca1ee7b55342bc5ffbb56a88eb18a7fe33b05c01795f1d6ecc2ffaa5cfbc82c54573361af148cbba15d62a49a5ec87c88cd766948643c34d3ea679547d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'gretap0\x00', r4, 0x10, 0x8000, 0x2, 0x7, {{0x2f, 0x4, 0x0, 0x15, 0xbc, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xd4, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xee02}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0x10001}, {@local, 0x800}, {@empty, 0x3c}]}, @cipso={0x86, 0x5c, 0x2, [{0x7, 0x6, "06e0c2ec"}, {0x1, 0x12, "01a7ffb7d86ba7cba5a8d048eb014799"}, {0x1, 0x12, "a3dfd2d4f93882d15e5f02741651f057"}, {0x0, 0x11, "4aaa0b42419400915850976fdb8258"}, {0x6, 0x7, "b789fe0b18"}, {0x6, 0xb, "19f13191c5d72d65a3"}, {0x2, 0x9, "e03b9c96a830b4"}]}, @timestamp_addr={0x44, 0x14, 0xa7, 0x1, 0xe, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}]}, @generic={0x82, 0x7, "9d67e56330"}, @end, @noop]}}}}}) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88000) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x3800, r1, &(0x7f00000001c0)="e797fa5ec763582fb91499e42fa4342ef63f94632bd346c65cb9b8435aab3291102419286ed1661cf3c737f15acad9e4965160285cb2dcb88cc560b464e37c1f3a7fb17ff8e311ca515d38896c82d285484d0e53f16cd9df1b2fafc658faffbf7a660f522574daf4a5805502", 0x6c, 0x8000, 0x0, 0x0, r7}, &(0x7f0000000140)) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000640)={'erspan0\x00', r5, 0x7800, 0x700, 0x8, 0x9, {{0x8, 0x4, 0x2, 0x29, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @loopback, {[@ssrr={0x89, 0xb, 0xc4, [@dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r12, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r13, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r13, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r14 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r14, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15}, 0x90) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000740)={0x560, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x885}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf9e}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfe1, 0x6, 0x9, 0x9}, {0x7, 0xff, 0x8}, {0xf9, 0x1f, 0xaf, 0xde4}, {0x81, 0xbc, 0x1, 0x9}, {0x5, 0x4, 0x6}, {0x7c38, 0x2, 0x3}, {0x9, 0x5, 0x6, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r13}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x764}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0x560}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, 0x0) (async) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000180)=0x6, 0x4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4880004}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) socket(0x11, 0x1, 0x2) (async) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x533302) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x200e, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000400) 23:38:27 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x291a00) io_setup(0x100, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000080)="dd5d6fa08b4ef4c16e320acde8297266a1f6918e23d3c67647414b135563e737ec873fbc966673b33528862664db381e18f839fcd60895a556028e497b90569de47b807003b32dfe6b1a4f44b305d1d2cd1248d7120c05abfbd6fb829b9f75ac16ff9fd2b8c41f4465bd0c6664e30e203b3b1cab5bb27fff8210b77db43fb239d673ebdcc6d5e7f3f558c9b1d28c80bd7bacd8aa6c52a5233ceae2ec24da282287977fa4125f75d989768f132c4cf68b96c10cc0d7ec55a9982556bf9f6d38b47c57f22eda50986645e443e553fb6a3062c890aff149404649b71a917fddea1dbaa77fac3b7a9e8fbf89c15f82837a9d271ed9a11cfdaa447d9841a26bf34f", 0xff, 0x7fffffff, 0x0, 0x1, r0}, &(0x7f0000000180)) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x200000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) [ 3199.328902][ T3675] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3199.328916][ T3675] R13: 000000000000000b R14: 00007f37ead9bf80 R15: 00007fff7b342df8 [ 3199.328937][ T3675] [ 3200.013710][ T3682] FAULT_INJECTION: forcing a failure. [ 3200.013710][ T3682] name failslab, interval 1, probability 0, space 0, times 0 23:38:27 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) (async, rerun: 64) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000bdbe00521bd061ee6fcc619b4d0047d783d48178d27f9324dbdbdbd7a70a47194c47f7303c7ab6ae90bb8da8d470b3b1d117518a1e5feaff4b9070d20c63c7af6e9b882e6fae6edc7ae7b989cde17d4ff7846e8b83b783b8bce8041d85abed36295cbf0ed969c6bb273144ca1ee7b55342bc5ffbb56a88eb18a7fe33b05c01795f1d6ecc2ffaa5cfbc82c54573361af148cbba15d62a49a5ec87c88cd766948643c34d3ea679547d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'gretap0\x00', r4, 0x10, 0x8000, 0x2, 0x7, {{0x2f, 0x4, 0x0, 0x15, 0xbc, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xd4, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xee02}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0x10001}, {@local, 0x800}, {@empty, 0x3c}]}, @cipso={0x86, 0x5c, 0x2, [{0x7, 0x6, "06e0c2ec"}, {0x1, 0x12, "01a7ffb7d86ba7cba5a8d048eb014799"}, {0x1, 0x12, "a3dfd2d4f93882d15e5f02741651f057"}, {0x0, 0x11, "4aaa0b42419400915850976fdb8258"}, {0x6, 0x7, "b789fe0b18"}, {0x6, 0xb, "19f13191c5d72d65a3"}, {0x2, 0x9, "e03b9c96a830b4"}]}, @timestamp_addr={0x44, 0x14, 0xa7, 0x1, 0xe, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}]}, @generic={0x82, 0x7, "9d67e56330"}, @end, @noop]}}}}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88000) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x3800, r1, &(0x7f00000001c0)="e797fa5ec763582fb91499e42fa4342ef63f94632bd346c65cb9b8435aab3291102419286ed1661cf3c737f15acad9e4965160285cb2dcb88cc560b464e37c1f3a7fb17ff8e311ca515d38896c82d285484d0e53f16cd9df1b2fafc658faffbf7a660f522574daf4a5805502", 0x6c, 0x8000, 0x0, 0x0, r7}, &(0x7f0000000140)) (async) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000640)={'erspan0\x00', r5, 0x7800, 0x700, 0x8, 0x9, {{0x8, 0x4, 0x2, 0x29, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @loopback, {[@ssrr={0x89, 0xb, 0xc4, [@dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r12, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r13, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r13, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) r14 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r14, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15}, 0x90) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000740)={0x560, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x885}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf9e}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfe1, 0x6, 0x9, 0x9}, {0x7, 0xff, 0x8}, {0xf9, 0x1f, 0xaf, 0xde4}, {0x81, 0xbc, 0x1, 0x9}, {0x5, 0x4, 0x6}, {0x7c38, 0x2, 0x3}, {0x9, 0x5, 0x6, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r13}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x764}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0x560}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, 0x0) (async, rerun: 64) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000180)=0x6, 0x4) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4880004}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket(0x11, 0x1, 0x2) (async, rerun: 64) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) (rerun: 64) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x533302) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8000000) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x200f, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = userfaultfd(0x80000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x0) 23:38:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 8) 23:38:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r1 = userfaultfd(0x80000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x0) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2021, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8100000) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2023, 0x0, 0x12, r0, 0x0) [ 3200.048718][ T3682] CPU: 0 PID: 3682 Comm: syz-executor.0 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3200.061604][ T3682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9000000) [ 3200.061628][ T3682] Call Trace: [ 3200.061636][ T3682] [ 3200.061644][ T3682] dump_stack_lvl+0x151/0x1b7 [ 3200.061680][ T3682] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3200.061709][ T3682] ? vm_area_alloc+0x24/0x1b0 [ 3200.061737][ T3682] dump_stack+0x15/0x18 [ 3200.061761][ T3682] should_fail_ex+0x3d0/0x520 [ 3200.061785][ T3682] ? vm_area_alloc+0xea/0x1b0 [ 3200.061809][ T3682] __should_failslab+0xaf/0xf0 [ 3200.061841][ T3682] should_failslab+0x9/0x20 [ 3200.061864][ T3682] kmem_cache_alloc+0x3b/0x2c0 [ 3200.061896][ T3682] vm_area_alloc+0xea/0x1b0 [ 3200.061919][ T3682] mmap_region+0xf01/0x2390 [ 3200.061953][ T3682] ? file_mmap_ok+0x150/0x150 [ 3200.061979][ T3682] ? cap_mmap_addr+0x169/0x2e0 [ 3200.061999][ T3682] ? __kasan_check_read+0x11/0x20 [ 3200.062026][ T3682] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3200.062059][ T3682] ? arch_get_unmapped_area+0x780/0x780 [ 3200.062090][ T3682] ? file_mmap_ok+0x104/0x150 [ 3200.062117][ T3682] do_mmap+0x853/0xe30 [ 3200.062145][ T3682] ? mlock_future_check+0x110/0x110 [ 3200.062175][ T3682] vm_mmap_pgoff+0x208/0x430 [ 3200.062199][ T3682] ? account_locked_vm+0x250/0x250 [ 3200.062222][ T3682] ? __fget_files+0x2cb/0x330 [ 3200.062273][ T3682] ksys_mmap_pgoff+0x15d/0x1e0 [ 3200.062305][ T3682] __x64_sys_mmap+0x103/0x120 [ 3200.062334][ T3682] do_syscall_64+0x3d/0xb0 [ 3200.062359][ T3682] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3200.062383][ T3682] RIP: 0033:0x7f37eac7cae9 [ 3200.062401][ T3682] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3200.062427][ T3682] RSP: 002b:00007f37eb9c30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3200.062452][ T3682] RAX: ffffffffffffffda RBX: 00007f37ead9bf80 RCX: 00007f37eac7cae9 [ 3200.062469][ T3682] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3200.062483][ T3682] RBP: 00007f37eb9c3120 R08: 0000000000000003 R09: 0000000000000000 [ 3200.062498][ T3682] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3200.062511][ T3682] R13: 000000000000000b R14: 00007f37ead9bf80 R15: 00007fff7b342df8 [ 3200.062532][ T3682] [ 3200.105461][ T3717] FAULT_INJECTION: forcing a failure. [ 3200.105461][ T3717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3200.105495][ T3717] CPU: 0 PID: 3717 Comm: syz-executor.0 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3200.105521][ T3717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3200.105535][ T3717] Call Trace: [ 3200.105541][ T3717] [ 3200.105551][ T3717] dump_stack_lvl+0x151/0x1b7 [ 3200.105586][ T3717] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3200.105616][ T3717] dump_stack+0x15/0x18 [ 3200.105640][ T3717] should_fail_ex+0x3d0/0x520 [ 3200.105667][ T3717] should_fail+0xb/0x10 [ 3200.105690][ T3717] should_fail_usercopy+0x1a/0x20 [ 3200.105714][ T3717] _copy_to_user+0x1e/0x90 [ 3200.105748][ T3717] simple_read_from_buffer+0xc7/0x150 [ 3200.105779][ T3717] proc_fail_nth_read+0x1a3/0x210 [ 3200.105802][ T3717] ? proc_fault_inject_write+0x390/0x390 [ 3200.105826][ T3717] ? fsnotify_perm+0x470/0x5d0 [ 3200.105853][ T3717] ? security_file_permission+0x86/0xb0 [ 3200.105882][ T3717] ? proc_fault_inject_write+0x390/0x390 [ 3200.105905][ T3717] vfs_read+0x26c/0xad0 [ 3200.105929][ T3717] ? kernel_read+0x1f0/0x1f0 [ 3200.415873][ T3717] ? mutex_lock+0xb1/0x1e0 [ 3200.420119][ T3717] ? bit_wait_io_timeout+0x120/0x120 [ 3200.425242][ T3717] ? __fdget_pos+0x22e/0x2c0 [ 3200.429660][ T3717] ? ksys_read+0x77/0x2c0 [ 3200.433826][ T3717] ksys_read+0x199/0x2c0 [ 3200.437904][ T3717] ? vfs_write+0xeb0/0xeb0 [ 3200.442160][ T3717] ? debug_smp_processor_id+0x17/0x20 [ 3200.447462][ T3717] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3200.453374][ T3717] __x64_sys_read+0x7b/0x90 [ 3200.457808][ T3717] do_syscall_64+0x3d/0xb0 [ 3200.462049][ T3717] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3200.467771][ T3717] RIP: 0033:0x7f37eac7b78c [ 3200.472024][ T3717] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 3200.491551][ T3717] RSP: 002b:00007f37eb9c30c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3200.499797][ T3717] RAX: ffffffffffffffda RBX: 00007f37ead9bf80 RCX: 00007f37eac7b78c 23:38:27 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x291a00) (async) io_setup(0x100, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) io_cancel(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000080)="dd5d6fa08b4ef4c16e320acde8297266a1f6918e23d3c67647414b135563e737ec873fbc966673b33528862664db381e18f839fcd60895a556028e497b90569de47b807003b32dfe6b1a4f44b305d1d2cd1248d7120c05abfbd6fb829b9f75ac16ff9fd2b8c41f4465bd0c6664e30e203b3b1cab5bb27fff8210b77db43fb239d673ebdcc6d5e7f3f558c9b1d28c80bd7bacd8aa6c52a5233ceae2ec24da282287977fa4125f75d989768f132c4cf68b96c10cc0d7ec55a9982556bf9f6d38b47c57f22eda50986645e443e553fb6a3062c890aff149404649b71a917fddea1dbaa77fac3b7a9e8fbf89c15f82837a9d271ed9a11cfdaa447d9841a26bf34f", 0xff, 0x7fffffff, 0x0, 0x1, r0}, &(0x7f0000000180)) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r1 = userfaultfd(0x80000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x0) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe000000) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x1fffff, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) syz_open_dev$usbmon(&(0x7f0000000000), 0x8000000000000003, 0x40400) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$vga_arbiter(r1, &(0x7f0000000140)=@other={'trylock', ' ', 'none'}, 0xd) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f0000000200), 0x9, 0x2900) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x7}, 0xf) syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x414000) 23:38:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) syz_open_dev$usbmon(&(0x7f0000000000), 0x8000000000000003, 0x40400) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$vga_arbiter(r1, &(0x7f0000000140)=@other={'trylock', ' ', 'none'}, 0xd) (async) write$vga_arbiter(r1, &(0x7f0000000140)=@other={'trylock', ' ', 'none'}, 0xd) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)) syz_open_dev$usbmon(&(0x7f0000000200), 0x9, 0x2900) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x7}, 0xf) syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x414000) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf000000) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x1000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15000000) [ 3200.507620][ T3717] RDX: 000000000000000f RSI: 00007f37eb9c3130 RDI: 0000000000000004 [ 3200.515431][ T3717] RBP: 00007f37eb9c3120 R08: 0000000000000000 R09: 0000000000000000 [ 3200.523231][ T3717] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3200.531043][ T3717] R13: 000000000000000b R14: 00007f37ead9bf80 R15: 00007fff7b342df8 [ 3200.538857][ T3717] 23:38:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x291a00) io_setup(0x100, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_cancel(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000080)="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", 0xff, 0x7fffffff, 0x0, 0x1, r0}, &(0x7f0000000180)) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_dev$usbmon(&(0x7f00000001c0), 0x0, 0x291a00) (async) io_setup(0x100, &(0x7f0000000000)) (async) io_cancel(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) io_cancel(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000080)="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", 0xff, 0x7fffffff, 0x0, 0x1, r0}, &(0x7f0000000180)) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) 23:38:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x1000) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x1000) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) pipe2(&(0x7f0000000000), 0x80800) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) (async) 23:38:27 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x8000000000000003, 0x40400) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$vga_arbiter(r1, &(0x7f0000000140)=@other={'trylock', ' ', 'none'}, 0xd) (async) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)) (async) syz_open_dev$usbmon(&(0x7f0000000200), 0x9, 0x2900) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x10, 0x4) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000001c0)={0xf, 0x1f, 0x1, 0x7}, 0xf) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x414000) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1f000000) 23:38:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2004, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 4: r0 = socket(0x27, 0x3, 0x200) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x4104, 0x4) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:27 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x1000) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) 23:38:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2008, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x20000000) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x20ffe000) 23:38:27 executing program 2: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = syz_io_uring_setup(0x150e, &(0x7f0000000080)={0x0, 0x7618, 0x800, 0x0, 0xf1}, &(0x7f0000000000), &(0x7f0000000100)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) write$P9_RXATTRWALK(r1, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x8}, 0xf) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x10140, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x10000000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r3, 0x180000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x10, r0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:38:27 executing program 1: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x80, 0x4, 0x3}, 0x5}}, 0x18) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x101ff, 0x0, &(0x7f0000ff3000/0xd000)=nil}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x2010, 0xffffffffffffffff, 0x10000000) 23:38:27 executing program 4: r0 = socket(0x27, 0x3, 0x200) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x4104, 0x4) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x200a, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x20fff000) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x0) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x21000000) 23:38:27 executing program 4: r0 = socket(0x27, 0x3, 0x200) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x4104, 0x4) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) socket(0x27, 0x3, 0x200) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x4104, 0x4) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x0) 23:38:27 executing program 2: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r0 = syz_io_uring_setup(0x150e, &(0x7f0000000080)={0x0, 0x7618, 0x800, 0x0, 0xf1}, &(0x7f0000000000), &(0x7f0000000100)) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) (async) write$P9_RXATTRWALK(r1, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x8}, 0xf) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x10140, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x10000000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r3, 0x180000000) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x10, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:38:27 executing program 1: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x80, 0x4, 0x3}, 0x5}}, 0x18) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x101ff, 0x0, &(0x7f0000ff3000/0xd000)=nil}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x2010, 0xffffffffffffffff, 0x10000000) 23:38:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x200d, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x22000000) 23:38:27 executing program 1: write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x80, 0x4, 0x3}, 0x5}}, 0x18) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x101ff, 0x0, &(0x7f0000ff3000/0xd000)=nil}) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x2010, 0xffffffffffffffff, 0x10000000) 23:38:27 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) io_setup(0x100, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x406203, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f00000015c0)=0x801) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x48) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, 0x0) io_submit(r1, 0x5, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x101, r2, &(0x7f0000000080)="405a66880e28e0c0109df46fda817c115e10acf5640d2bceae9b5c651477aac5fb97094d38e6a5e05e79fc888598357681546e9abebbd3da822d39e769cbe826c4973978bea5683b0df8649d421e8d239a118fea87c0245cea0e4d2b9a772a99ef627ddc7fc340a2375a493db3c3d7174dd25d357cec48dffe93274739399d960a215562e43da5952b349ea79891e9591a2e25", 0x93, 0x8, 0x0, 0x1, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x7, r3, &(0x7f00000001c0)="f2", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x800, r5, &(0x7f0000000280)="abe2c1bfdc95ad17b9e19cfc70851189e5b5783b1a0134865c44614f96085d43c8bb43d55fe9abc52b90ecfea22a7e1be3bb6e6581833a2e7ca36d8c8a886a158c60276dfcdd0d65c6d48593798b7c437fd40c9a1fac09fd476c2b687777be5127af7b4822806464624ef2776155ea48b6e966c1a33d465bd7481f64d1a726015b50e5c168a83ef4bb60525dae866d6b0cf3b9dd2b5e88f76fe2", 0x9a, 0x7, 0x0, 0x0, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000400)="c3e35bd7ca146ab0d198de80882ebcd0364e738f95e73b2b1edafcb2c93d44e6acfcfd1b2ccb9c3b27c4ac2ed564ed90b0957ab1364246e83338e009cbe4d4bcde1a33db4b20d7abfd1a3f2c31475ea6002445561ff5343fa1e07a33e1adc963e2ee1208e1b6da4253244001524969ffdcc54a9db73944fd23391bd29658415e9bf19530243f65e9f7d63430437e02bbbc05c5", 0x93, 0x7, 0x0, 0x1, r8}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000500)="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", 0x1000, 0x9, 0x0, 0x2}]) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) 23:38:27 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x200e, 0x0, 0x12, r0, 0x0) 23:38:27 executing program 2: mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) r0 = syz_io_uring_setup(0x150e, &(0x7f0000000080)={0x0, 0x7618, 0x800, 0x0, 0xf1}, &(0x7f0000000000), &(0x7f0000000100)) (rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) (async) write$P9_RXATTRWALK(r1, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x8}, 0xf) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x10140, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r2, 0x10000000) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r3, 0x180000000) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x10, r0, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:38:27 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x23000000) 23:38:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x12, r0, 0x0) 23:38:28 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x6, [@empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @local, @random="101e492d932a"]}) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x110, r1, 0x1) 23:38:28 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) io_setup(0x100, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x0) (async) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x406203, 0x0) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f00000015c0)=0x801) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x48) (async) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, 0x0) (async, rerun: 32) io_submit(r1, 0x5, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x101, r2, &(0x7f0000000080)="405a66880e28e0c0109df46fda817c115e10acf5640d2bceae9b5c651477aac5fb97094d38e6a5e05e79fc888598357681546e9abebbd3da822d39e769cbe826c4973978bea5683b0df8649d421e8d239a118fea87c0245cea0e4d2b9a772a99ef627ddc7fc340a2375a493db3c3d7174dd25d357cec48dffe93274739399d960a215562e43da5952b349ea79891e9591a2e25", 0x93, 0x8, 0x0, 0x1, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x7, r3, &(0x7f00000001c0)="f2", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x800, r5, &(0x7f0000000280)="abe2c1bfdc95ad17b9e19cfc70851189e5b5783b1a0134865c44614f96085d43c8bb43d55fe9abc52b90ecfea22a7e1be3bb6e6581833a2e7ca36d8c8a886a158c60276dfcdd0d65c6d48593798b7c437fd40c9a1fac09fd476c2b687777be5127af7b4822806464624ef2776155ea48b6e966c1a33d465bd7481f64d1a726015b50e5c168a83ef4bb60525dae866d6b0cf3b9dd2b5e88f76fe2", 0x9a, 0x7, 0x0, 0x0, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000400)="c3e35bd7ca146ab0d198de80882ebcd0364e738f95e73b2b1edafcb2c93d44e6acfcfd1b2ccb9c3b27c4ac2ed564ed90b0957ab1364246e83338e009cbe4d4bcde1a33db4b20d7abfd1a3f2c31475ea6002445561ff5343fa1e07a33e1adc963e2ee1208e1b6da4253244001524969ffdcc54a9db73944fd23391bd29658415e9bf19530243f65e9f7d63430437e02bbbc05c5", 0x93, 0x7, 0x0, 0x1, r8}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000500)="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", 0x1000, 0x9, 0x0, 0x2}]) (rerun: 32) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x200f, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7bffffff) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe, 0x12, r0, 0x0) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x12, r0, 0x0) 23:38:28 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x2) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x2) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x6, [@empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @local, @random="101e492d932a"]}) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x110, r1, 0x1) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2021, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf0ffffff) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x10a00) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x2010, r0, 0x0) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x21, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2023, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) (async, rerun: 64) syz_open_dev$usbmon(&(0x7f0000000080), 0x5, 0x2) (rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000000c0)={0x0, 0x6, [@empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @local, @random="101e492d932a"]}) (async, rerun: 64) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, 0x110, r1, 0x1) (rerun: 64) 23:38:28 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) io_setup(0x100, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x406203, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f00000015c0)=0x801) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x48) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, 0x0) io_submit(r1, 0x5, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x101, r2, &(0x7f0000000080)="405a66880e28e0c0109df46fda817c115e10acf5640d2bceae9b5c651477aac5fb97094d38e6a5e05e79fc888598357681546e9abebbd3da822d39e769cbe826c4973978bea5683b0df8649d421e8d239a118fea87c0245cea0e4d2b9a772a99ef627ddc7fc340a2375a493db3c3d7174dd25d357cec48dffe93274739399d960a215562e43da5952b349ea79891e9591a2e25", 0x93, 0x8, 0x0, 0x1, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x7, r3, &(0x7f00000001c0)="f2", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x800, r5, &(0x7f0000000280)="abe2c1bfdc95ad17b9e19cfc70851189e5b5783b1a0134865c44614f96085d43c8bb43d55fe9abc52b90ecfea22a7e1be3bb6e6581833a2e7ca36d8c8a886a158c60276dfcdd0d65c6d48593798b7c437fd40c9a1fac09fd476c2b687777be5127af7b4822806464624ef2776155ea48b6e966c1a33d465bd7481f64d1a726015b50e5c168a83ef4bb60525dae866d6b0cf3b9dd2b5e88f76fe2", 0x9a, 0x7, 0x0, 0x0, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000400)="c3e35bd7ca146ab0d198de80882ebcd0364e738f95e73b2b1edafcb2c93d44e6acfcfd1b2ccb9c3b27c4ac2ed564ed90b0957ab1364246e83338e009cbe4d4bcde1a33db4b20d7abfd1a3f2c31475ea6002445561ff5343fa1e07a33e1adc963e2ee1208e1b6da4253244001524969ffdcc54a9db73944fd23391bd29658415e9bf19530243f65e9f7d63430437e02bbbc05c5", 0x93, 0x7, 0x0, 0x1, r8}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000500)="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", 0x1000, 0x9, 0x0, 0x2}]) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) io_setup(0x100, &(0x7f0000000000)) (async) io_cancel(r1, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x0) (async) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x406203, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f00000015c0)=0x801) (async) pipe2(&(0x7f0000000240), 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x48) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, 0x0) (async) io_submit(r1, 0x5, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x101, r2, &(0x7f0000000080)="405a66880e28e0c0109df46fda817c115e10acf5640d2bceae9b5c651477aac5fb97094d38e6a5e05e79fc888598357681546e9abebbd3da822d39e769cbe826c4973978bea5683b0df8649d421e8d239a118fea87c0245cea0e4d2b9a772a99ef627ddc7fc340a2375a493db3c3d7174dd25d357cec48dffe93274739399d960a215562e43da5952b349ea79891e9591a2e25", 0x93, 0x8, 0x0, 0x1, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x7, r3, &(0x7f00000001c0)="f2", 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x800, r5, &(0x7f0000000280)="abe2c1bfdc95ad17b9e19cfc70851189e5b5783b1a0134865c44614f96085d43c8bb43d55fe9abc52b90ecfea22a7e1be3bb6e6581833a2e7ca36d8c8a886a158c60276dfcdd0d65c6d48593798b7c437fd40c9a1fac09fd476c2b687777be5127af7b4822806464624ef2776155ea48b6e966c1a33d465bd7481f64d1a726015b50e5c168a83ef4bb60525dae866d6b0cf3b9dd2b5e88f76fe2", 0x9a, 0x7, 0x0, 0x0, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x7, r7, &(0x7f0000000400)="c3e35bd7ca146ab0d198de80882ebcd0364e738f95e73b2b1edafcb2c93d44e6acfcfd1b2ccb9c3b27c4ac2ed564ed90b0957ab1364246e83338e009cbe4d4bcde1a33db4b20d7abfd1a3f2c31475ea6002445561ff5343fa1e07a33e1adc963e2ee1208e1b6da4253244001524969ffdcc54a9db73944fd23391bd29658415e9bf19530243f65e9f7d63430437e02bbbc05c5", 0x93, 0x7, 0x0, 0x1, r8}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000500)="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", 0x1000, 0x9, 0x0, 0x2}]) (async) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf2ffffff) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x1fffff, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x23, 0x12, r0, 0x0) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x10a00) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x2010, r0, 0x0) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa00, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xff600000) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x10a00) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x2010, r0, 0x0) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd00, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xffffff7b) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x643c, 0x143280) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffff0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe00, 0x12, r0, 0x0) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x643c, 0x143280) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffff2) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf00, 0x12, r0, 0x0) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x0) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x643c, 0x143280) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x643c, 0x143280) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000000) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1f00, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x0) 23:38:28 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)="09dec3626724e8b609fc78e751e193fb8f703de4d5b8f5c7090a239e5e91dce99533219c490cc728330cde20fb2fefc8b8fbe4f157250262b0c978b01e4ab742712a32ef09d191562936d119d7598c3cf906867c85cdf4c8674c6c8de23f997b6fd728bf70411d3d0cc092fe31fbb9eb7baed36dc3e494497e2c3ed2e469c76de8df7406760fc8e76c752290ad391615466fcc2446ced82b0d94330443fbe46187913ea566dbdf853539ee5d9a27f3b92f", 0xb1}, 0x68) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000)=0x9, 0x4) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430402, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x20010, r4, 0x80000000) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000300aaaac9aaaaaabbbbbbbbbbbb000000000000"]) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x12, r0, 0x0) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x60ffffffffff) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0) 23:38:28 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)="09dec3626724e8b609fc78e751e193fb8f703de4d5b8f5c7090a239e5e91dce99533219c490cc728330cde20fb2fefc8b8fbe4f157250262b0c978b01e4ab742712a32ef09d191562936d119d7598c3cf906867c85cdf4c8674c6c8de23f997b6fd728bf70411d3d0cc092fe31fbb9eb7baed36dc3e494497e2c3ed2e469c76de8df7406760fc8e76c752290ad391615466fcc2446ced82b0d94330443fbe46187913ea566dbdf853539ee5d9a27f3b92f", 0xb1}, 0x68) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000)=0x9, 0x4) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430402, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x20010, r4, 0x80000000) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000300aaaac9aaaaaabbbbbbbbbbbb000000000000"]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)="09dec3626724e8b609fc78e751e193fb8f703de4d5b8f5c7090a239e5e91dce99533219c490cc728330cde20fb2fefc8b8fbe4f157250262b0c978b01e4ab742712a32ef09d191562936d119d7598c3cf906867c85cdf4c8674c6c8de23f997b6fd728bf70411d3d0cc092fe31fbb9eb7baed36dc3e494497e2c3ed2e469c76de8df7406760fc8e76c752290ad391615466fcc2446ced82b0d94330443fbe46187913ea566dbdf853539ee5d9a27f3b92f", 0xb1}, 0x68) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000)=0x9, 0x4) (async) pipe2(&(0x7f0000000200), 0x80000) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430402, 0x0) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x20010, r4, 0x80000000) (async) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000300aaaac9aaaaaabbbbbbbbbbbb000000000000"]) (async) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2100, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7ffffffffffff) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2300, 0x12, r0, 0x0) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffe000/0x1000)=nil) (async, rerun: 64) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe0ff2000000000) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe, 0x12, r0, 0x0) 23:38:28 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)="09dec3626724e8b609fc78e751e193fb8f703de4d5b8f5c7090a239e5e91dce99533219c490cc728330cde20fb2fefc8b8fbe4f157250262b0c978b01e4ab742712a32ef09d191562936d119d7598c3cf906867c85cdf4c8674c6c8de23f997b6fd728bf70411d3d0cc092fe31fbb9eb7baed36dc3e494497e2c3ed2e469c76de8df7406760fc8e76c752290ad391615466fcc2446ced82b0d94330443fbe46187913ea566dbdf853539ee5d9a27f3b92f", 0xb1}, 0x68) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000)=0x9, 0x4) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430402, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x20010, r4, 0x80000000) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000300aaaac9aaaaaabbbbbbbbbbbb000000000000"]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)="09dec3626724e8b609fc78e751e193fb8f703de4d5b8f5c7090a239e5e91dce99533219c490cc728330cde20fb2fefc8b8fbe4f157250262b0c978b01e4ab742712a32ef09d191562936d119d7598c3cf906867c85cdf4c8674c6c8de23f997b6fd728bf70411d3d0cc092fe31fbb9eb7baed36dc3e494497e2c3ed2e469c76de8df7406760fc8e76c752290ad391615466fcc2446ced82b0d94330443fbe46187913ea566dbdf853539ee5d9a27f3b92f", 0xb1}, 0x68) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000000)=0x9, 0x4) (async) pipe2(&(0x7f0000000200), 0x80000) (async) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430402, 0x0) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x20010, r4, 0x80000000) (async) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000300aaaac9aaaaaabbbbbbbbbbbb000000000000"]) (async) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x60ff, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf074ad0380ffff) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x12, r0, 0x0) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000f00de518ea905a2763deb9f16b64f6389231f55e4212a715893c1d4d93a137025e9283879c75bd05102d6e168b68ae2cadcb5ad681ae358ca29505bb92ebaeb0ae2f767e5d0dc4758fa8669a0eac472e15e3418ddce148ffa33f828e4feb37e6cfb28a96d6ad78dd93f3f3c680c313a5d5b1791b", @ANYRES16=r2, @ANYBLOB="00042cbd7000fcdbdf25370000000c009900010400006c0000000500180128000000080057000300000008005700ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xcf29aec6b50f1f62}, 0x85) read$msr(0xffffffffffffffff, &(0x7f0000000080)=""/205, 0xcd) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x20000, 0x12, r0, 0x0) 23:38:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r3, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x90b, 0x0, {{0x1a, 0x4, 0x2, 0x7, 0x68, 0x65, 0x0, 0x22, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x54, 0xa4, 0x1, 0x3, [{@remote, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0xffffffff}, {@local, 0x9}, {@loopback, 0x2}, {@multicast2, 0x7}, {@multicast1, 0x2}, {@multicast2, 0x80}, {@empty, 0x39}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x7800, 0x8, 0x4, 0x2, {{0x7, 0x4, 0x0, 0x32, 0x1c, 0x68, 0x0, 0x1f, 0x4, 0x0, @private=0xa010101, @loopback, {[@ra={0x94, 0x4}, @generic={0x94, 0x3, 'Z'}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x428, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x278, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x40, 0x2, 0xa36}, {0x8000, 0x9, 0x0, 0x8}, {0x7, 0x6, 0x7, 0xffffff01}, {0x7ff, 0x95, 0x5, 0x4}, {0x0, 0x3, 0x1, 0x80}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x1b}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r11}}}]}}]}, 0x428}, 0x1, 0x0, 0x0, 0x8001}, 0x800) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf0ff2000000000) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x21, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000000000000) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) 23:38:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r3, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x90b, 0x0, {{0x1a, 0x4, 0x2, 0x7, 0x68, 0x65, 0x0, 0x22, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x54, 0xa4, 0x1, 0x3, [{@remote, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0xffffffff}, {@local, 0x9}, {@loopback, 0x2}, {@multicast2, 0x7}, {@multicast1, 0x2}, {@multicast2, 0x80}, {@empty, 0x39}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x7800, 0x8, 0x4, 0x2, {{0x7, 0x4, 0x0, 0x32, 0x1c, 0x68, 0x0, 0x1f, 0x4, 0x0, @private=0xa010101, @loopback, {[@ra={0x94, 0x4}, @generic={0x94, 0x3, 'Z'}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x428, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x278, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x40, 0x2, 0xa36}, {0x8000, 0x9, 0x0, 0x8}, {0x7, 0x6, 0x7, 0xffffff01}, {0x7ff, 0x95, 0x5, 0x4}, {0x0, 0x3, 0x1, 0x80}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x1b}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r11}}}]}}]}, 0x428}, 0x1, 0x0, 0x0, 0x8001}, 0x800) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x23, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000000000000) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x12, r0, 0x0) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000f00de518ea905a2763deb9f16b64f6389231f55e4212a715893c1d4d93a137025e9283879c75bd05102d6e168b68ae2cadcb5ad681ae358ca29505bb92ebaeb0ae2f767e5d0dc4758fa8669a0eac472e15e3418ddce148ffa33f828e4feb37e6cfb28a96d6ad78dd93f3f3c680c313a5d5b1791b", @ANYRES16=r2, @ANYBLOB="00042cbd7000fcdbdf25370000000c009900010400006c0000000500180128000000080057000300000008005700ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xcf29aec6b50f1f62}, 0x85) read$msr(0xffffffffffffffff, &(0x7f0000000080)=""/205, 0xcd) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}}) 23:38:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080), &(0x7f00000000c0)=0x10) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r3, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (rerun: 64) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) (async, rerun: 64) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x1, 0x7800, 0x90b, 0x0, {{0x1a, 0x4, 0x2, 0x7, 0x68, 0x65, 0x0, 0x22, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x54, 0xa4, 0x1, 0x3, [{@remote, 0x1ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0xffffffff}, {@local, 0x9}, {@loopback, 0x2}, {@multicast2, 0x7}, {@multicast1, 0x2}, {@multicast2, 0x80}, {@empty, 0x39}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x7800, 0x8, 0x4, 0x2, {{0x7, 0x4, 0x0, 0x32, 0x1c, 0x68, 0x0, 0x1f, 0x4, 0x0, @private=0xa010101, @loopback, {[@ra={0x94, 0x4}, @generic={0x94, 0x3, 'Z'}]}}}}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x428, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x278, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0x40, 0x2, 0xa36}, {0x8000, 0x9, 0x0, 0x8}, {0x7, 0x6, 0x7, 0xffffff01}, {0x7ff, 0x95, 0x5, 0x4}, {0x0, 0x3, 0x1, 0x80}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x1b}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r11}}}]}}]}, 0x428}, 0x1, 0x0, 0x0, 0x8001}, 0x800) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x10, 0x100) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000f00de518ea905a2763deb9f16b64f6389231f55e4212a715893c1d4d93a137025e9283879c75bd05102d6e168b68ae2cadcb5ad681ae358ca29505bb92ebaeb0ae2f767e5d0dc4758fa8669a0eac472e15e3418ddce148ffa33f828e4feb37e6cfb28a96d6ad78dd93f3f3c680c313a5d5b1791b", @ANYRES16=r2, @ANYBLOB="00042cbd7000fcdbdf25370000000c009900010400006c0000000500180128000000080057000300000008005700ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0xcf29aec6b50f1f62}, 0x85) read$msr(0xffffffffffffffff, &(0x7f0000000080)=""/205, 0xcd) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (rerun: 32) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa00, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000000000000) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe0ff20, 0x12, r0, 0x0) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x10, 0x100) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400000000000000) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd00, 0x12, r0, 0x0) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r0, 0x0) 23:38:28 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x60081) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x10, 0x100) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400040000000000) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe00, 0x12, r0, 0x0) 23:38:28 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x60081) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x60081) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x88681) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket(0x29, 0x5, 0x101) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf00, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000000000000) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x12, r0, 0x0) 23:38:28 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x60081) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x88681) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket(0x29, 0x5, 0x101) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x810000000000000) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r1, 0x0) socketpair(0x1e, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000380), 0x4) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x180000000) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8, '\x00', r5, r7, 0x4, 0x3, 0x5}, 0x48) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r9, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r9, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x90) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x90) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x1f4, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe51f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe242}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5121fb37}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000000, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1f00, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x900000000000000) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r1, 0x0) socketpair(0x1e, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000380), 0x4) (async, rerun: 64) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) (async, rerun: 32) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x180000000) (async, rerun: 32) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8, '\x00', r5, r7, 0x4, 0x3, 0x5}, 0x48) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r9, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r9, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x90) (async) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x90) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x1f4, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe51f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe242}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5121fb37}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 23:38:28 executing program 4: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x7, 0x7, 0x4, 0x1, {{0x2f, 0x4, 0x0, 0x2b, 0xbc, 0x67, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @empty, {[@cipso={0x86, 0x76, 0x3, [{0x1, 0xd, "6847071e0610715c197d8b"}, {0x5, 0x8, "612b893d7738"}, {0x6, 0x11, "ee2aaee4b3e4524df1935b61b63106"}, {0x5, 0x11, "36f8c76590983c4447a60bdd86fc9e"}, {0x1, 0x12, "1918d156c7a2bb401fae4a662d8dd325"}, {0x1, 0x4, "8792"}, {0x2, 0x7, "d98308fb87"}, {0x7, 0xe, "092bffe0b2a1482252e55702"}, {0x802f590e21336e67, 0xe, "7a63fe958325f1fd5bada68a"}]}, @rr={0x7, 0xf, 0xc4, [@broadcast, @multicast1, @rand_addr=0x64010101]}, @lsrr={0x83, 0x1f, 0x3d, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @local, @empty, @private=0xa010100, @loopback]}, @noop, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x700, 0x1, 0x3ff, 0x5, {{0xd, 0x4, 0x3, 0x16, 0x34, 0x64, 0x0, 0x80, 0x0, 0x0, @multicast2, @remote, {[@rr={0x7, 0x7, 0xb1, [@loopback]}, @lsrr={0x83, 0x7, 0x14, [@remote]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x25, 0x0, 0x4, [0x347, 0xde3d]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x0, 0x1, 0xffffffdc, 0x7, {{0x30, 0x4, 0x2, 0x6, 0xc0, 0x64, 0x0, 0x92, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@end, @generic={0x86, 0xf, "cd53126e544f14e4d225d56788"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x3b, 0x0, 0x4, [0x2, 0x10001, 0x0]}, @generic={0x86, 0x7, "e38c140c35"}, @lsrr={0x83, 0x1b, 0x9f, [@empty, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, @loopback]}, @lsrr={0x83, 0x17, 0xbd, [@private=0xa010101, @rand_addr=0x64010101, @empty, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0x4c, 0xff, 0x3, 0xc, [{@private=0xa010101}, {@private=0xa010101, 0x7}, {@broadcast, 0x5e6}, {@loopback, 0x2}, {@broadcast, 0x1f}, {@local, 0x9b}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010100, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000000}]}]}}}}}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x10000, 0x5, 0x2, 0x200, 0x1, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x13, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@alu={0x3, 0x1, 0xb, 0x1, 0xa, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x90) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x310, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r0}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe22}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, 0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x119000, 0x0) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000980), r9) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x90) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x14, r11, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x4004000) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x110, r9, 0xffffffffffffffff) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa000000, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe00000000000000) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x88681) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket(0x29, 0x5, 0x101) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x88681) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) socket(0x29, 0x5, 0x101) (async) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000000)) (async) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd000000, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x12, r0, 0x0) 23:38:28 executing program 4: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x7, 0x7, 0x4, 0x1, {{0x2f, 0x4, 0x0, 0x2b, 0xbc, 0x67, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @empty, {[@cipso={0x86, 0x76, 0x3, [{0x1, 0xd, "6847071e0610715c197d8b"}, {0x5, 0x8, "612b893d7738"}, {0x6, 0x11, "ee2aaee4b3e4524df1935b61b63106"}, {0x5, 0x11, "36f8c76590983c4447a60bdd86fc9e"}, {0x1, 0x12, "1918d156c7a2bb401fae4a662d8dd325"}, {0x1, 0x4, "8792"}, {0x2, 0x7, "d98308fb87"}, {0x7, 0xe, "092bffe0b2a1482252e55702"}, {0x802f590e21336e67, 0xe, "7a63fe958325f1fd5bada68a"}]}, @rr={0x7, 0xf, 0xc4, [@broadcast, @multicast1, @rand_addr=0x64010101]}, @lsrr={0x83, 0x1f, 0x3d, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @local, @empty, @private=0xa010100, @loopback]}, @noop, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x700, 0x1, 0x3ff, 0x5, {{0xd, 0x4, 0x3, 0x16, 0x34, 0x64, 0x0, 0x80, 0x0, 0x0, @multicast2, @remote, {[@rr={0x7, 0x7, 0xb1, [@loopback]}, @lsrr={0x83, 0x7, 0x14, [@remote]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x25, 0x0, 0x4, [0x347, 0xde3d]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x0, 0x1, 0xffffffdc, 0x7, {{0x30, 0x4, 0x2, 0x6, 0xc0, 0x64, 0x0, 0x92, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@end, @generic={0x86, 0xf, "cd53126e544f14e4d225d56788"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x3b, 0x0, 0x4, [0x2, 0x10001, 0x0]}, @generic={0x86, 0x7, "e38c140c35"}, @lsrr={0x83, 0x1b, 0x9f, [@empty, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, @loopback]}, @lsrr={0x83, 0x17, 0xbd, [@private=0xa010101, @rand_addr=0x64010101, @empty, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0x4c, 0xff, 0x3, 0xc, [{@private=0xa010101}, {@private=0xa010101, 0x7}, {@broadcast, 0x5e6}, {@loopback, 0x2}, {@broadcast, 0x1f}, {@local, 0x9b}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010100, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000000}]}]}}}}}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x10000, 0x5, 0x2, 0x200, 0x1, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x13, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@alu={0x3, 0x1, 0xb, 0x1, 0xa, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x90) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x310, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r0}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe22}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x119000, 0x0) (async) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x119000, 0x0) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000980), r9) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x90) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x14, r11, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x4004000) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x110, r9, 0xffffffffffffffff) (async) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x110, r9, 0xffffffffffffffff) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r1, 0x0) (async, rerun: 64) socketpair(0x1e, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000380), 0x4) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x180000000) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8, '\x00', r5, r7, 0x4, 0x3, 0x5}, 0x48) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r9, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r9, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r11}, 0x90) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x90) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x1f4, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r9}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe51f}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe242}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5121fb37}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf00000000000000) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe000000, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2100, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1500000000000000) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7ff, 0x2) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x7, [@restrict, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0x4, 0x2}, {0x7}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x24, 0x1}, @fwd={0x4}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x5, 0x7}, {0xe, 0x3, 0xeb9}]}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x2}]}, {0x0, [0x61, 0x5f, 0x2e, 0x30, 0x61]}}, &(0x7f0000000180)=""/113, 0xbb, 0x71, 0x0, 0x3}, 0x20) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x101fa, 0x0, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf000000, 0x12, r0, 0x0) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) inotify_rm_watch(r1, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1f00000000000000) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) inotify_rm_watch(r1, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2300, 0x12, r0, 0x0) 23:38:28 executing program 4: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x7, 0x7, 0x4, 0x1, {{0x2f, 0x4, 0x0, 0x2b, 0xbc, 0x67, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @empty, {[@cipso={0x86, 0x76, 0x3, [{0x1, 0xd, "6847071e0610715c197d8b"}, {0x5, 0x8, "612b893d7738"}, {0x6, 0x11, "ee2aaee4b3e4524df1935b61b63106"}, {0x5, 0x11, "36f8c76590983c4447a60bdd86fc9e"}, {0x1, 0x12, "1918d156c7a2bb401fae4a662d8dd325"}, {0x1, 0x4, "8792"}, {0x2, 0x7, "d98308fb87"}, {0x7, 0xe, "092bffe0b2a1482252e55702"}, {0x802f590e21336e67, 0xe, "7a63fe958325f1fd5bada68a"}]}, @rr={0x7, 0xf, 0xc4, [@broadcast, @multicast1, @rand_addr=0x64010101]}, @lsrr={0x83, 0x1f, 0x3d, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, @local, @empty, @private=0xa010100, @loopback]}, @noop, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x700, 0x1, 0x3ff, 0x5, {{0xd, 0x4, 0x3, 0x16, 0x34, 0x64, 0x0, 0x80, 0x0, 0x0, @multicast2, @remote, {[@rr={0x7, 0x7, 0xb1, [@loopback]}, @lsrr={0x83, 0x7, 0x14, [@remote]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0x25, 0x0, 0x4, [0x347, 0xde3d]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x0, 0x1, 0xffffffdc, 0x7, {{0x30, 0x4, 0x2, 0x6, 0xc0, 0x64, 0x0, 0x92, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@end, @generic={0x86, 0xf, "cd53126e544f14e4d225d56788"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x3b, 0x0, 0x4, [0x2, 0x10001, 0x0]}, @generic={0x86, 0x7, "e38c140c35"}, @lsrr={0x83, 0x1b, 0x9f, [@empty, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, @loopback]}, @lsrr={0x83, 0x17, 0xbd, [@private=0xa010101, @rand_addr=0x64010101, @empty, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0x4c, 0xff, 0x3, 0xc, [{@private=0xa010101}, {@private=0xa010101, 0x7}, {@broadcast, 0x5e6}, {@loopback, 0x2}, {@broadcast, 0x1f}, {@local, 0x9b}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010100, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000000}]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'erspan0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x0, 0x1, 0xffffffdc, 0x7, {{0x30, 0x4, 0x2, 0x6, 0xc0, 0x64, 0x0, 0x92, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@end, @generic={0x86, 0xf, "cd53126e544f14e4d225d56788"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x3b, 0x0, 0x4, [0x2, 0x10001, 0x0]}, @generic={0x86, 0x7, "e38c140c35"}, @lsrr={0x83, 0x1b, 0x9f, [@empty, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, @loopback]}, @lsrr={0x83, 0x17, 0xbd, [@private=0xa010101, @rand_addr=0x64010101, @empty, @private=0xa010102, @loopback]}, @timestamp_prespec={0x44, 0x4c, 0xff, 0x3, 0xc, [{@private=0xa010101}, {@private=0xa010101, 0x7}, {@broadcast, 0x5e6}, {@loopback, 0x2}, {@broadcast, 0x1f}, {@local, 0x9b}, {@rand_addr=0x64010101, 0x5}, {@rand_addr=0x64010100, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000000}]}]}}}}}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x10000, 0x5, 0x2, 0x200, 0x1, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x10000, 0x5, 0x2, 0x200, 0x1, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x13, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@alu={0x3, 0x1, 0xb, 0x1, 0xa, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x5}, 0x90) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x310, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r0}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r5}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe22}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x310}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, 0x0) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x119000, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000980), r9) (async) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000980), r9) r12 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x90) sendmsg$TEAM_CMD_OPTIONS_GET(r10, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x14, r11, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x4004000) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x110, r9, 0xffffffffffffffff) (async) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x110, r9, 0xffffffffffffffff) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7ff, 0x2) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x7, [@restrict, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0x4, 0x2}, {0x7}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x24, 0x1}, @fwd={0x4}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x5, 0x7}, {0xe, 0x3, 0xeb9}]}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x2}]}, {0x0, [0x61, 0x5f, 0x2e, 0x30, 0x61]}}, &(0x7f0000000180)=""/113, 0xbb, 0x71, 0x0, 0x3}, 0x20) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x101fa, 0x0, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x101fa, 0x0, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1f000000, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x60ff, 0x12, r0, 0x0) 23:38:28 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000), 0x7ff, 0x2) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7ff, 0x2) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x7, [@restrict, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0x4, 0x2}, {0x7}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x24, 0x1}, @fwd={0x4}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x5, 0x7}, {0xe, 0x3, 0xeb9}]}, @var={0x10, 0x0, 0x0, 0xe, 0x3, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x2}]}, {0x0, [0x61, 0x5f, 0x2e, 0x30, 0x61]}}, &(0x7f0000000180)=""/113, 0xbb, 0x71, 0x0, 0x3}, 0x20) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) (async) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil}) pipe2(&(0x7f0000000240), 0x0) (async) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000280)={0x101fa, 0x0, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) inotify_rm_watch(r1, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2010, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000000000000) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x20000000, 0x12, r0, 0x0) 23:38:28 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xe4ea, 0x5a7f00) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x20000, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2100000000000000) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2200000000000000) 23:38:28 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xe4ea, 0x5a7f00) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x20ffe000, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x12, r0, 0x0) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000ffe000/0x1000)=nil}) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 23:38:28 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xe4ea, 0x5a7f00) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe0ff20, 0x12, r0, 0x0) 23:38:28 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x21000000, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2300000000000000) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000ffe000/0x1000)=nil}) (async) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 23:38:28 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7bffffffffffffff) 23:38:28 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) 23:38:28 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 23:38:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x23000000, 0x12, r0, 0x0) 23:38:28 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf0ffffffffffffff) 23:38:28 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10000, 0x0, &(0x7f0000ffe000/0x1000)=nil}) mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xff600000, 0x12, r0, 0x0) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x2000)=nil, 0x930, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r0, 0x0) 23:38:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffe000/0x1000)=nil}) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf2ffffffffffffff) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x12, r0, 0x0) 23:38:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffe000/0x1000)=nil}) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f0000ffe000/0x1000)=nil}) (async) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xffff8003ad74f000) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2100000000, 0x12, r0, 0x0) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000000, 0x12, r0, 0x0) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x549001) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x1) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x60ffffffffff, 0x12, r0, 0x0) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xffffffffff600000) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x549001) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x1) (async) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x1) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa000000, 0x12, r0, 0x0) 23:38:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x800000000000000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000000000, 0x12, r0, 0x0) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x549001) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x1) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x549001) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, r0, 0x1) (async) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xffffffffffff0700) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd000000, 0x12, r0, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7fffffffffffd, 0x12, r0, 0x0) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x84f}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000850}, 0x0) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 23:38:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x800000000000000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xffffffffffffff7b) 23:38:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x800000000000000, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 32) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (rerun: 32) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffffffffffff0) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe000000, 0x12, r0, 0x0) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80000000000000, 0x12, r0, 0x0) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf000000, 0x12, r0, 0x0) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x84f}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000850}, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe0ff2000000000, 0x12, r0, 0x0) 23:38:29 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1080) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x50, r0, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000000000000, 0x12, r0, 0x0) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffffffffffff2) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1f000000, 0x12, r0, 0x0) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x84f}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000850}, 0x0) 23:38:29 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (rerun: 64) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1080) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x50, r0, 0x0) 23:38:29 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000000000000, 0x12, r0, 0x0) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x20, 0x1, 0x8}, 0x80000001}}, 0x18) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x20000000, 0x12, r0, 0x0) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x20, 0x1, 0x8}, 0x80000001}}, 0x18) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x7) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000000000000, 0x12, r0, 0x0) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async, rerun: 64) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 64) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x20ffe000, 0x12, r0, 0x0) 23:38:29 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1080) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x50, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) pipe2(&(0x7f0000000000), 0x1080) (async) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000008, 0x50, r0, 0x0) (async) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x20, 0x1, 0x8}, 0x80000001}}, 0x18) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000000000000, 0x12, r0, 0x0) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x7) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x21000000, 0x12, r0, 0x0) 23:38:29 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000180)="8fcdd72134cbbabe837578c6933fc2aeae96da007996bbc3aac425ab8a3e5ff4099822d3cc7ae2a30e1697535847b94d1a8195b2eb935ac1756811bd9e699f71674a87a665875d27b87e7c1f7daa139eb1829d5fbef3af319a2853cb00749e6a863f05bb2b56", 0x66, 0x1, 0x0, 0x3}, &(0x7f0000000100)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa00000000000000, 0x12, r0, 0x0) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x23000000, 0x12, r0, 0x0) 23:38:29 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000180)="8fcdd72134cbbabe837578c6933fc2aeae96da007996bbc3aac425ab8a3e5ff4099822d3cc7ae2a30e1697535847b94d1a8195b2eb935ac1756811bd9e699f71674a87a665875d27b87e7c1f7daa139eb1829d5fbef3af319a2853cb00749e6a863f05bb2b56", 0x66, 0x1, 0x0, 0x3}, &(0x7f0000000100)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000180)="8fcdd72134cbbabe837578c6933fc2aeae96da007996bbc3aac425ab8a3e5ff4099822d3cc7ae2a30e1697535847b94d1a8195b2eb935ac1756811bd9e699f71674a87a665875d27b87e7c1f7daa139eb1829d5fbef3af319a2853cb00749e6a863f05bb2b56", 0x66, 0x1, 0x0, 0x3}, &(0x7f0000000100)) (async) pipe2(&(0x7f0000000080), 0x4000) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) (async) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xff600000, 0x12, r0, 0x0) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0x7) 23:38:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) write$P9_RRENAMEAT(r0, &(0x7f00000001c0)={0x7, 0x4b, 0x2}, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000fddbdf250100000005000500010000000800020002000000050006000200000010000400ff7f0000ff07000009000000050006000000000008000300ffffffff10000400e6000000faffffff0908000008000200010100003aad603076891a85b0b377719e9b71f65ba7473045b8ad08c7a9ecdb699ec64f1a0e5cde775b07ce49"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd00000000000000, 0x12, r0, 0x0) 23:38:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) write$P9_RRENAMEAT(r0, &(0x7f00000001c0)={0x7, 0x4b, 0x2}, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000fddbdf250100000005000500010000000800020002000000050006000200000010000400ff7f0000ff07000009000000050006000000000008000300ffffffff10000400e6000000faffffff0908000008000200010100003aad603076891a85b0b377719e9b71f65ba7473045b8ad08c7a9ecdb699ec64f1a0e5cde775b07ce49"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) write$P9_RRENAMEAT(r0, &(0x7f00000001c0)={0x7, 0x4b, 0x2}, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000fddbdf250100000005000500010000000800020002000000050006000200000010000400ff7f0000ff07000009000000050006000000000008000300ffffffff10000400e6000000faffffff0908000008000200010100003aad603076891a85b0b377719e9b71f65ba7473045b8ad08c7a9ecdb699ec64f1a0e5cde775b07ce49"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) (async) 23:38:29 executing program 1: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000140)=""/207, 0x8000, 0x2800, 0x6, 0x1}, 0x20) socketpair(0x25, 0x806, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x4, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) write$P9_RGETATTR(r2, &(0x7f0000000080)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x0, 0x64919ccf, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x6}}, 0xa0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 23:38:29 executing program 5: syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 32) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (rerun: 32) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000180)="8fcdd72134cbbabe837578c6933fc2aeae96da007996bbc3aac425ab8a3e5ff4099822d3cc7ae2a30e1697535847b94d1a8195b2eb935ac1756811bd9e699f71674a87a665875d27b87e7c1f7daa139eb1829d5fbef3af319a2853cb00749e6a863f05bb2b56", 0x66, 0x1, 0x0, 0x3}, &(0x7f0000000100)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) 23:38:29 executing program 2: sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1469050e", @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf2500000000"], 0x14}}, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101242, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001cc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f00000005c0)={0x1690, r7, 0x408, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x1634, 0x8, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5, 0x3, 0xc7}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fc6324d57422d0673df8c206a263a7cd4895593a1835161d2872bef8a6f1238c"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0eaa3f9d22bde95d7401cb061e755bc5de379f125176c7a0e66ae70e99ac6671"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x550, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x20, @dev={0xfe, 0x80, '\x00', 0x17}, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8ce500bc1aad98abf9cf3b67b07ff52b20d38be7c37a9c66664608e3e21dba40"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7fff, @remote, 0x3aa}}, @WGPEER_A_ALLOWEDIPS={0x4b4, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1e98}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}]}, {0x4}, {0x494, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @mcast2, 0x200}}, @WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x9, @remote, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "97f35ce94f6b355712f8554c5905b559512490bf5f90098bda40270bda8c6b09"}]}, {0x53c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4fbd3e3b93e6230dc7188bced4306058741989d24a857d0bdaea4124f7ed8c66"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x488, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x43c, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f5e17ba148f3f598b8a9093040a981dc481ec9e4c2d78c04159e946a2cb0d8da"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x81}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1690}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x0, '\x00', r6, r1, 0x1, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r3, 0x40, 0x80, 0x4, 0x7fff, {{0x2c, 0x4, 0x2, 0x28, 0xb0, 0x65, 0x0, 0xff, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x34, 0x2d, 0x1, 0xd, [{@remote}, {@multicast2, 0x149}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x20}, {@private=0xa010100, 0x7}, {@rand_addr=0x64010100}]}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x1, 0xa, "d02b9513741c5b98"}, {0x2, 0xf, "b550e8465b51f1d42f8c388422"}]}, @timestamp_addr={0x44, 0x44, 0x95, 0x1, 0x1, [{@broadcast, 0xde0}, {@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010100, 0x20}, {@multicast2, 0xffffffe0}, {@local, 0x1}, {@loopback, 0x9}, {@multicast1, 0xf5e9bbf}, {@private=0xa010102, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2100000000, 0x12, r0, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe00000000000000, 0x12, r0, 0x0) 23:38:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) write$P9_RRENAMEAT(r0, &(0x7f00000001c0)={0x7, 0x4b, 0x2}, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}}, 0x0) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012cbd7000fddbdf250100000005000500010000000800020002000000050006000200000010000400ff7f0000ff07000009000000050006000000000008000300ffffffff10000400e6000000faffffff0908000008000200010100003aad603076891a85b0b377719e9b71f65ba7473045b8ad08c7a9ecdb699ec64f1a0e5cde775b07ce49"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20008004) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000092cf0cdac5aeee307cab654171b61be8c4d947e523d066838b61cfa9eb09181db2ad21a6889f53381a6f95007c71f7bddf4938f3ffc3ec4c5624b3547a7db371d3133b5eb4d1f64079dc450159632bc3337903cd63a880ff13f793b242534d615e44cccf779f5e0d38eb55286c131cebdae8607432dbbd4ae749da34e6010a1f31f88cbde0de86f1edcda7bf7d5ac7007e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000140)={0x10000, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', r3, 0x8, 0x80, 0xffffff80, 0x1, {{0x12, 0x4, 0x1, 0x0, 0x48, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2b}, {[@generic={0x86, 0xc, "327138f31751429ae0fe"}, @end, @noop, @rr={0x7, 0x23, 0x53, [@local, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @loopback, @local, @loopback]}]}}}}}) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x60ffffffffff, 0x12, r0, 0x0) 23:38:29 executing program 2: sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1469050e", @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf2500000000"], 0x14}}, 0x1) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101242, 0x0) (rerun: 32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001cc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f00000005c0)={0x1690, r7, 0x408, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x1634, 0x8, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5, 0x3, 0xc7}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fc6324d57422d0673df8c206a263a7cd4895593a1835161d2872bef8a6f1238c"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0eaa3f9d22bde95d7401cb061e755bc5de379f125176c7a0e66ae70e99ac6671"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x550, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x20, @dev={0xfe, 0x80, '\x00', 0x17}, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8ce500bc1aad98abf9cf3b67b07ff52b20d38be7c37a9c66664608e3e21dba40"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7fff, @remote, 0x3aa}}, @WGPEER_A_ALLOWEDIPS={0x4b4, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1e98}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}]}, {0x4}, {0x494, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @mcast2, 0x200}}, @WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x9, @remote, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "97f35ce94f6b355712f8554c5905b559512490bf5f90098bda40270bda8c6b09"}]}, {0x53c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4fbd3e3b93e6230dc7188bced4306058741989d24a857d0bdaea4124f7ed8c66"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x488, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x43c, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f5e17ba148f3f598b8a9093040a981dc481ec9e4c2d78c04159e946a2cb0d8da"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x81}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1690}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000000) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x0, '\x00', r6, r1, 0x1, 0x2}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r3, 0x40, 0x80, 0x4, 0x7fff, {{0x2c, 0x4, 0x2, 0x28, 0xb0, 0x65, 0x0, 0xff, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x34, 0x2d, 0x1, 0xd, [{@remote}, {@multicast2, 0x149}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x20}, {@private=0xa010100, 0x7}, {@rand_addr=0x64010100}]}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x1, 0xa, "d02b9513741c5b98"}, {0x2, 0xf, "b550e8465b51f1d42f8c388422"}]}, @timestamp_addr={0x44, 0x44, 0x95, 0x1, 0x1, [{@broadcast, 0xde0}, {@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010100, 0x20}, {@multicast2, 0xffffffe0}, {@local, 0x1}, {@loopback, 0x9}, {@multicast1, 0xf5e9bbf}, {@private=0xa010102, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf00000000000000, 0x12, r0, 0x0) 23:38:29 executing program 1: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000140)=""/207, 0x8000, 0x2800, 0x6, 0x1}, 0x20) (async) socketpair(0x25, 0x806, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x4, 0x4) (async) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) write$P9_RGETATTR(r2, &(0x7f0000000080)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x0, 0x64919ccf, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x6}}, 0xa0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000000000, 0x12, r0, 0x0) 23:38:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000080)=0x100) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008080) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x40, r2, &(0x7f0000000140)="ce957d1bc995130422beaf64b4b412169a81f4df9ec4ee7e42bac2a96f53e1cc1c9737cc353b2c88eb6a2d51693094499a05415aa394492509aafce510ec0b7f68dce963af88c55ba9f425154d9f54e0a2e06fcb7aeb1606877d15b8ff2e2b3ebb891ebd0bce6848cafa59e214bfefff8db58a34cbd180dfd0d29ec076a480a15060bfcc35f48a5766df822f19055836affed8a3d398807f295e09802675e31494005801ff94074aeb790d", 0xab, 0x958f, 0x0, 0x2, r7}, &(0x7f0000000240)) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000300074fe18bb5030180c2000002000000000000753e4893259527d33e3c551e6326c15ea19003e63a8d0ab81b1d351aa91ac71a873246f995bec617dd49823254c2301379aeab06fc35640189e0b2bdbcd52b68a6da5f803eeb874443199c1e4e34673582"]) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', r10, 0x700, 0x7, 0x9, 0x7fff, {{0x2c, 0x4, 0x1, 0x25, 0xb0, 0x66, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty, {[@timestamp_prespec={0x44, 0x24, 0xe1, 0x3, 0x2, [{@empty, 0xfffffff7}, {@broadcast, 0xaed9}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x55, 0x0, [{0x2, 0x10, "9a424dd69050753648b05beeb154"}, {0x1, 0xe, "2e84b36568d802ca605b9a1d"}, {0x0, 0xa, "a96bd978e26cd5e3"}, {0x0, 0xa, "32ff7bfd95b64fe1"}, {0x3, 0xf, "341e8735ebc92a6ac1ca09226f"}, {0x2, 0xc, "d9d5bc5381e27321ce2f"}, {0x5, 0x2}]}, @timestamp={0x44, 0x14, 0xff, 0x0, 0x9, [0x9, 0x9, 0x7ff, 0x5]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1f00000000000000, 0x12, r0, 0x0) 23:38:29 executing program 1: setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000140)=""/207, 0x8000, 0x2800, 0x6, 0x1}, 0x20) socketpair(0x25, 0x806, 0x1, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x4, 0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) write$P9_RGETATTR(r2, &(0x7f0000000080)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x0, 0x64919ccf, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x6}}, 0xa0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7fffffffffffd, 0x12, r0, 0x0) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000092cf0cdac5aeee307cab654171b61be8c4d947e523d066838b61cfa9eb09181db2ad21a6889f53381a6f95007c71f7bddf4938f3ffc3ec4c5624b3547a7db371d3133b5eb4d1f64079dc450159632bc3337903cd63a880ff13f793b242534d615e44cccf779f5e0d38eb55286c131cebdae8607432dbbd4ae749da34e6010a1f31f88cbde0de86f1edcda7bf7d5ac7007e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000140)={0x10000, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', r3, 0x8, 0x80, 0xffffff80, 0x1, {{0x12, 0x4, 0x1, 0x0, 0x48, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2b}, {[@generic={0x86, 0xc, "327138f31751429ae0fe"}, @end, @noop, @rr={0x7, 0x23, 0x53, [@local, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @loopback, @local, @loopback]}]}}}}}) 23:38:29 executing program 1: getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0x80) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100), 0x4) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000180)="ce", 0x1}, 0x1, 0x0, 0x0, 0x4040080}, 0x4048080) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0)=0x4, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x8001) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000280)) 23:38:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000080)=0x100) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008080) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) (async) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x40, r2, &(0x7f0000000140)="ce957d1bc995130422beaf64b4b412169a81f4df9ec4ee7e42bac2a96f53e1cc1c9737cc353b2c88eb6a2d51693094499a05415aa394492509aafce510ec0b7f68dce963af88c55ba9f425154d9f54e0a2e06fcb7aeb1606877d15b8ff2e2b3ebb891ebd0bce6848cafa59e214bfefff8db58a34cbd180dfd0d29ec076a480a15060bfcc35f48a5766df822f19055836affed8a3d398807f295e09802675e31494005801ff94074aeb790d", 0xab, 0x958f, 0x0, 0x2, r7}, &(0x7f0000000240)) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000300074fe18bb5030180c2000002000000000000753e4893259527d33e3c551e6326c15ea19003e63a8d0ab81b1d351aa91ac71a873246f995bec617dd49823254c2301379aeab06fc35640189e0b2bdbcd52b68a6da5f803eeb874443199c1e4e34673582"]) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x90) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', r10, 0x700, 0x7, 0x9, 0x7fff, {{0x2c, 0x4, 0x1, 0x25, 0xb0, 0x66, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty, {[@timestamp_prespec={0x44, 0x24, 0xe1, 0x3, 0x2, [{@empty, 0xfffffff7}, {@broadcast, 0xaed9}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x55, 0x0, [{0x2, 0x10, "9a424dd69050753648b05beeb154"}, {0x1, 0xe, "2e84b36568d802ca605b9a1d"}, {0x0, 0xa, "a96bd978e26cd5e3"}, {0x0, 0xa, "32ff7bfd95b64fe1"}, {0x3, 0xf, "341e8735ebc92a6ac1ca09226f"}, {0x2, 0xc, "d9d5bc5381e27321ce2f"}, {0x5, 0x2}]}, @timestamp={0x44, 0x14, 0xff, 0x0, 0x9, [0x9, 0x9, 0x7ff, 0x5]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) 23:38:29 executing program 2: sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1469050e", @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf2500000000"], 0x14}}, 0x1) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101242, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001cc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f00000005c0)={0x1690, r7, 0x408, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x1634, 0x8, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5, 0x3, 0xc7}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fc6324d57422d0673df8c206a263a7cd4895593a1835161d2872bef8a6f1238c"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0eaa3f9d22bde95d7401cb061e755bc5de379f125176c7a0e66ae70e99ac6671"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x550, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x20, @dev={0xfe, 0x80, '\x00', 0x17}, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8ce500bc1aad98abf9cf3b67b07ff52b20d38be7c37a9c66664608e3e21dba40"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7fff, @remote, 0x3aa}}, @WGPEER_A_ALLOWEDIPS={0x4b4, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1e98}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}]}, {0x4}, {0x494, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @mcast2, 0x200}}, @WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x9, @remote, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "97f35ce94f6b355712f8554c5905b559512490bf5f90098bda40270bda8c6b09"}]}, {0x53c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4fbd3e3b93e6230dc7188bced4306058741989d24a857d0bdaea4124f7ed8c66"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x488, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x43c, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f5e17ba148f3f598b8a9093040a981dc481ec9e4c2d78c04159e946a2cb0d8da"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x81}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1690}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x0, '\x00', r6, r1, 0x1, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r3, 0x40, 0x80, 0x4, 0x7fff, {{0x2c, 0x4, 0x2, 0x28, 0xb0, 0x65, 0x0, 0xff, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x34, 0x2d, 0x1, 0xd, [{@remote}, {@multicast2, 0x149}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x20}, {@private=0xa010100, 0x7}, {@rand_addr=0x64010100}]}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x1, 0xa, "d02b9513741c5b98"}, {0x2, 0xf, "b550e8465b51f1d42f8c388422"}]}, @timestamp_addr={0x44, 0x44, 0x95, 0x1, 0x1, [{@broadcast, 0xde0}, {@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010100, 0x20}, {@multicast2, 0xffffffe0}, {@local, 0x1}, {@loopback, 0x9}, {@multicast1, 0xf5e9bbf}, {@private=0xa010102, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1469050e", @ANYRES16=0x0, @ANYBLOB="000327bd7000ffdbdf2500000000"], 0x14}}, 0x1) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101242, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)=r4}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00'}) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001cc0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001c80)={&(0x7f00000005c0)={0x1690, r7, 0x408, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x1634, 0x8, 0x0, 0x1, [{0x138, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5, 0x3, 0xc7}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fc6324d57422d0673df8c206a263a7cd4895593a1835161d2872bef8a6f1238c"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0eaa3f9d22bde95d7401cb061e755bc5de379f125176c7a0e66ae70e99ac6671"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x550, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x20, @dev={0xfe, 0x80, '\x00', 0x17}, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8ce500bc1aad98abf9cf3b67b07ff52b20d38be7c37a9c66664608e3e21dba40"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7fff, @remote, 0x3aa}}, @WGPEER_A_ALLOWEDIPS={0x4b4, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1e98}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0xb0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}]}, {0x4}, {0x494, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @mcast2, 0x200}}, @WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x9, @remote, 0x2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "97f35ce94f6b355712f8554c5905b559512490bf5f90098bda40270bda8c6b09"}]}, {0x53c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4f0, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1e}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4fbd3e3b93e6230dc7188bced4306058741989d24a857d0bdaea4124f7ed8c66"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7ff}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x488, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x43c, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f5e17ba148f3f598b8a9093040a981dc481ec9e4c2d78c04159e946a2cb0d8da"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x81}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1690}, 0x1, 0x0, 0x0, 0x20008000}, 0x2000000) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x0, '\x00', r6, r1, 0x1, 0x2}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r3, 0x40, 0x80, 0x4, 0x7fff, {{0x2c, 0x4, 0x2, 0x28, 0xb0, 0x65, 0x0, 0xff, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x34, 0x2d, 0x1, 0xd, [{@remote}, {@multicast2, 0x149}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x20}, {@private=0xa010100, 0x7}, {@rand_addr=0x64010100}]}, @cipso={0x86, 0x1f, 0xffffffffffffffff, [{0x1, 0xa, "d02b9513741c5b98"}, {0x2, 0xf, "b550e8465b51f1d42f8c388422"}]}, @timestamp_addr={0x44, 0x44, 0x95, 0x1, 0x1, [{@broadcast, 0xde0}, {@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010100, 0x20}, {@multicast2, 0xffffffe0}, {@local, 0x1}, {@loopback, 0x9}, {@multicast1, 0xf5e9bbf}, {@private=0xa010102, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000000000000, 0x12, r0, 0x0) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000092cf0cdac5aeee307cab654171b61be8c4d947e523d066838b61cfa9eb09181db2ad21a6889f53381a6f95007c71f7bddf4938f3ffc3ec4c5624b3547a7db371d3133b5eb4d1f64079dc450159632bc3337903cd63a880ff13f793b242534d615e44cccf779f5e0d38eb55286c131cebdae8607432dbbd4ae749da34e6010a1f31f88cbde0de86f1edcda7bf7d5ac7007e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000140)={0x10000, 0x0, &(0x7f0000ffe000/0x1000)=nil}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'sit0\x00', r3, 0x8, 0x80, 0xffffff80, 0x1, {{0x12, 0x4, 0x1, 0x0, 0x48, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2b}, {[@generic={0x86, 0xc, "327138f31751429ae0fe"}, @end, @noop, @rr={0x7, 0x23, 0x53, [@local, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2, @loopback, @local, @loopback]}]}}}}}) 23:38:29 executing program 1: getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0x80) (async) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100), 0x4) (async) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000180)="ce", 0x1}, 0x1, 0x0, 0x0, 0x4040080}, 0x4048080) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0)=0x4, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x8001) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000280)) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80000000000000, 0x12, r0, 0x0) 23:38:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r0, 0x2, &(0x7f0000000080)=0x100) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r1}, 0x18) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008080) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) (async) io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x40, r2, &(0x7f0000000140)="ce957d1bc995130422beaf64b4b412169a81f4df9ec4ee7e42bac2a96f53e1cc1c9737cc353b2c88eb6a2d51693094499a05415aa394492509aafce510ec0b7f68dce963af88c55ba9f425154d9f54e0a2e06fcb7aeb1606877d15b8ff2e2b3ebb891ebd0bce6848cafa59e214bfefff8db58a34cbd180dfd0d29ec076a480a15060bfcc35f48a5766df822f19055836affed8a3d398807f295e09802675e31494005801ff94074aeb790d", 0xab, 0x958f, 0x0, 0x2, r7}, &(0x7f0000000240)) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000300074fe18bb5030180c2000002000000000000753e4893259527d33e3c551e6326c15ea19003e63a8d0ab81b1d351aa91ac71a873246f995bec617dd49823254c2301379aeab06fc35640189e0b2bdbcd52b68a6da5f803eeb874443199c1e4e34673582"]) (async) r8 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10}, 0x90) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000540)={'sit0\x00', r10, 0x700, 0x7, 0x9, 0x7fff, {{0x2c, 0x4, 0x1, 0x25, 0xb0, 0x66, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty, {[@timestamp_prespec={0x44, 0x24, 0xe1, 0x3, 0x2, [{@empty, 0xfffffff7}, {@broadcast, 0xaed9}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x55, 0x0, [{0x2, 0x10, "9a424dd69050753648b05beeb154"}, {0x1, 0xe, "2e84b36568d802ca605b9a1d"}, {0x0, 0xa, "a96bd978e26cd5e3"}, {0x0, 0xa, "32ff7bfd95b64fe1"}, {0x3, 0xf, "341e8735ebc92a6ac1ca09226f"}, {0x2, 0xc, "d9d5bc5381e27321ce2f"}, {0x5, 0x2}]}, @timestamp={0x44, 0x14, 0xff, 0x0, 0x9, [0x9, 0x9, 0x7ff, 0x5]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2100000000000000, 0x12, r0, 0x0) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe0ff2000000000, 0x12, r0, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2300000000000000, 0x12, r0, 0x0) 23:38:29 executing program 1: getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0x80) (async) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100), 0x4) (async, rerun: 64) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000180)="ce", 0x1}, 0x1, 0x0, 0x0, 0x4040080}, 0x4048080) (async, rerun: 64) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (rerun: 64) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000001c0)=0x4, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) mmap$usbmon(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x8001) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000280)) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async, rerun: 32) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) (rerun: 32) 23:38:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x305a80, 0x0) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000000000000, 0x12, r0, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfdffffffffff0700, 0x12, r0, 0x0) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe2$9p(&(0x7f0000000080), 0x84000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) 23:38:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x305a80, 0x0) 23:38:29 executing program 5: syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe2$9p(&(0x7f0000000080), 0x84000) (async) pipe2$9p(&(0x7f0000000080), 0x84000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd6f}, [@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @alu={0x7, 0x0, 0x1, 0x8, 0x4, 0x50, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x5, 0x5, 0x9, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xef, &(0x7f0000000100)=""/239, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, r3, r4, r5, r6, 0x1, 0x1, r7], &(0x7f0000000380)=[{0x8, 0x5, 0x7, 0x1}, {0x1, 0x1, 0xe, 0x7}], 0x10, 0x101}, 0x90) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffff00000000, 0x12, r0, 0x0) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000000000000, 0x12, r0, 0x0) 23:38:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x305a80, 0x0) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd6f}, [@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @alu={0x7, 0x0, 0x1, 0x8, 0x4, 0x50, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x5, 0x5, 0x9, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xef, &(0x7f0000000100)=""/239, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, r3, r4, r5, r6, 0x1, 0x1, r7], &(0x7f0000000380)=[{0x8, 0x5, 0x7, 0x1}, {0x1, 0x1, 0xe, 0x7}], 0x10, 0x101}, 0x90) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffff600000, 0x12, r0, 0x0) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe2$9p(&(0x7f0000000080), 0x84000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000000000000, 0x12, r0, 0x0) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x565f02) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080), 0x4) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd6f}, [@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @alu={0x7, 0x0, 0x1, 0x8, 0x4, 0x50, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x5, 0x5, 0x9, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xef, &(0x7f0000000100)=""/239, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, r3, r4, r5, r6, 0x1, 0x1, r7], &(0x7f0000000380)=[{0x8, 0x5, 0x7, 0x1}, {0x1, 0x1, 0xe, 0x7}], 0x10, 0x101}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd6f}, [@printk={@integer, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @alu={0x7, 0x0, 0x1, 0x8, 0x4, 0x50, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x5, 0x5, 0x9, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xef, &(0x7f0000000100)=""/239, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, r3, r4, r5, r6, 0x1, 0x1, r7], &(0x7f0000000380)=[{0x8, 0x5, 0x7, 0x1}, {0x1, 0x1, 0xe, 0x7}], 0x10, 0x101}, 0x90) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000000000000, 0x12, r0, 0x0) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x565f02) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080), 0x4) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xb8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) write$P9_RWRITE(r1, &(0x7f0000000200)={0xb, 0x77, 0x1, 0x9}, 0xb) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001380)={'sit0\x00', &(0x7f0000001300)={'erspan0\x00', 0x0, 0x8000, 0x20, 0xd7, 0x6, {{0x13, 0x4, 0x0, 0x31, 0x4c, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@ssrr={0x89, 0x13, 0x5d, [@broadcast, @broadcast, @multicast1, @loopback]}, @lsrr={0x83, 0x23, 0x9d, [@empty, @rand_addr=0x64010100, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x40}, @empty, @private=0xa010101, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000014c0)={'tunl0\x00', &(0x7f00000013c0)={'erspan0\x00', r2, 0x7, 0x8000, 0x5, 0x1000, {{0x35, 0x4, 0x3, 0x5, 0xd4, 0x65, 0x0, 0x9, 0x2f, 0x0, @remote, @multicast2, {[@cipso={0x86, 0x5a, 0x2, [{0x5, 0xb, "765bbeaf79197f1b33"}, {0x0, 0xf, "2d7623ca8b1c5c10e62f4541e5"}, {0x5, 0x11, "f6bfdf0506bd335d70ed0869e78ee0"}, {0x6, 0xa, "7172691817417644"}, {0x1, 0x6, "2331edf8"}, {0x0, 0x12, "657b69338b76f877df03ba812fbb3864"}, {0x5, 0x7, "f37910b08f"}]}, @timestamp={0x44, 0x18, 0x54, 0x0, 0xf, [0x200, 0x8, 0x972, 0x4, 0x6]}, @cipso={0x86, 0x26, 0x0, [{0x2, 0x2}, {0x5, 0x11, "2c7985a390aaf2a13df78b138bbc55"}, {0x6, 0xa, "60079417a3671eed"}, {0x0, 0x3, 'd'}]}, @generic={0x88, 0xc, "24a23cadbacc4ffed964"}, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x5, [0x8001, 0x2, 0xffff, 0x1, 0x401]}, @noop, @end]}}}}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) write$P9_RRENAMEAT(r3, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001240)={&(0x7f0000000240)=""/4096, 0x5000, 0x1800, 0x8, 0x4}, 0x20) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x210801, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000001280)={0xffffffffffffffff}, 0x80080) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000012c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000001500)) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x9d3, r0, &(0x7f00000000c0)="fb5f67d2616b52b1e0f7dfe00c2a041b70a3b2b56687f99bced58d580b8a7656", 0x20, 0x0, 0x0, 0x2, r5}, &(0x7f0000000180)) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x565f02) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080), 0x4) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x4) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000010500)=@generic={0x0, 0x10}, 0x18) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x10000000) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x800, 0x5b, "1e45e5f62103e1362fdd7d43bbeea306be72f849eb2ad22f2abae9e3edd202652e4c715570af9f5b617a40b09646caaee0eff4c88c7e557c41fb9e702c46279e11a669b20d8e1f508a3b13934ecad1e2b6886941c02135bdd88e3f"}) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5363, 0x80) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa00000000000000, 0x12, r0, 0x0) 23:38:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd00000000000000, 0x12, r0, 0x0) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000010500)=@generic={0x0, 0x10}, 0x18) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x10000000) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x800, 0x5b, "1e45e5f62103e1362fdd7d43bbeea306be72f849eb2ad22f2abae9e3edd202652e4c715570af9f5b617a40b09646caaee0eff4c88c7e557c41fb9e702c46279e11a669b20d8e1f508a3b13934ecad1e2b6886941c02135bdd88e3f"}) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5363, 0x80) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) (async) bpf$OBJ_GET_PROG(0x9, &(0x7f0000010500)=@generic={0x0, 0x10}, 0x18) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x10000000) (async) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x800, 0x5b, "1e45e5f62103e1362fdd7d43bbeea306be72f849eb2ad22f2abae9e3edd202652e4c715570af9f5b617a40b09646caaee0eff4c88c7e557c41fb9e702c46279e11a669b20d8e1f508a3b13934ecad1e2b6886941c02135bdd88e3f"}) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5363, 0x80) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xb8, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) write$P9_RWRITE(r1, &(0x7f0000000200)={0xb, 0x77, 0x1, 0x9}, 0xb) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001380)={'sit0\x00', &(0x7f0000001300)={'erspan0\x00', 0x0, 0x8000, 0x20, 0xd7, 0x6, {{0x13, 0x4, 0x0, 0x31, 0x4c, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@ssrr={0x89, 0x13, 0x5d, [@broadcast, @broadcast, @multicast1, @loopback]}, @lsrr={0x83, 0x23, 0x9d, [@empty, @rand_addr=0x64010100, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x40}, @empty, @private=0xa010101, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000014c0)={'tunl0\x00', &(0x7f00000013c0)={'erspan0\x00', r2, 0x7, 0x8000, 0x5, 0x1000, {{0x35, 0x4, 0x3, 0x5, 0xd4, 0x65, 0x0, 0x9, 0x2f, 0x0, @remote, @multicast2, {[@cipso={0x86, 0x5a, 0x2, [{0x5, 0xb, "765bbeaf79197f1b33"}, {0x0, 0xf, "2d7623ca8b1c5c10e62f4541e5"}, {0x5, 0x11, "f6bfdf0506bd335d70ed0869e78ee0"}, {0x6, 0xa, "7172691817417644"}, {0x1, 0x6, "2331edf8"}, {0x0, 0x12, "657b69338b76f877df03ba812fbb3864"}, {0x5, 0x7, "f37910b08f"}]}, @timestamp={0x44, 0x18, 0x54, 0x0, 0xf, [0x200, 0x8, 0x972, 0x4, 0x6]}, @cipso={0x86, 0x26, 0x0, [{0x2, 0x2}, {0x5, 0x11, "2c7985a390aaf2a13df78b138bbc55"}, {0x6, 0xa, "60079417a3671eed"}, {0x0, 0x3, 'd'}]}, @generic={0x88, 0xc, "24a23cadbacc4ffed964"}, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x5, [0x8001, 0x2, 0xffff, 0x1, 0x401]}, @noop, @end]}}}}}) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) write$P9_RRENAMEAT(r3, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001240)={&(0x7f0000000240)=""/4096, 0x5000, 0x1800, 0x8, 0x4}, 0x20) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x210801, 0x0) (async, rerun: 64) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) pipe2(&(0x7f0000001280)={0xffffffffffffffff}, 0x80080) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000012c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) (async) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000001500)) (async) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x9d3, r0, &(0x7f00000000c0)="fb5f67d2616b52b1e0f7dfe00c2a041b70a3b2b56687f99bced58d580b8a7656", 0x20, 0x0, 0x0, 0x2, r5}, &(0x7f0000000180)) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xe00000000000000, 0x12, r0, 0x0) 23:38:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:29 executing program 2: r0 = getgid() r1 = getgid() getgroups(0x6, &(0x7f0000000000)=[0xee01, r0, 0xee01, r1, 0xffffffffffffffff, 0x0]) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000000180)="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", 0x120, r3}, 0x68) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r4) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000010500)=@generic={0x0, 0x10}, 0x18) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x10000000) (async) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x800, 0x5b, "1e45e5f62103e1362fdd7d43bbeea306be72f849eb2ad22f2abae9e3edd202652e4c715570af9f5b617a40b09646caaee0eff4c88c7e557c41fb9e702c46279e11a669b20d8e1f508a3b13934ecad1e2b6886941c02135bdd88e3f"}) (async) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5363, 0x80) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xa) 23:38:29 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xb8, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) write$P9_RWRITE(r1, &(0x7f0000000200)={0xb, 0x77, 0x1, 0x9}, 0xb) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001380)={'sit0\x00', &(0x7f0000001300)={'erspan0\x00', 0x0, 0x8000, 0x20, 0xd7, 0x6, {{0x13, 0x4, 0x0, 0x31, 0x4c, 0x68, 0x0, 0x7, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@ssrr={0x89, 0x13, 0x5d, [@broadcast, @broadcast, @multicast1, @loopback]}, @lsrr={0x83, 0x23, 0x9d, [@empty, @rand_addr=0x64010100, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x40}, @empty, @private=0xa010101, @multicast1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000014c0)={'tunl0\x00', &(0x7f00000013c0)={'erspan0\x00', r2, 0x7, 0x8000, 0x5, 0x1000, {{0x35, 0x4, 0x3, 0x5, 0xd4, 0x65, 0x0, 0x9, 0x2f, 0x0, @remote, @multicast2, {[@cipso={0x86, 0x5a, 0x2, [{0x5, 0xb, "765bbeaf79197f1b33"}, {0x0, 0xf, "2d7623ca8b1c5c10e62f4541e5"}, {0x5, 0x11, "f6bfdf0506bd335d70ed0869e78ee0"}, {0x6, 0xa, "7172691817417644"}, {0x1, 0x6, "2331edf8"}, {0x0, 0x12, "657b69338b76f877df03ba812fbb3864"}, {0x5, 0x7, "f37910b08f"}]}, @timestamp={0x44, 0x18, 0x54, 0x0, 0xf, [0x200, 0x8, 0x972, 0x4, 0x6]}, @cipso={0x86, 0x26, 0x0, [{0x2, 0x2}, {0x5, 0x11, "2c7985a390aaf2a13df78b138bbc55"}, {0x6, 0xa, "60079417a3671eed"}, {0x0, 0x3, 'd'}]}, @generic={0x88, 0xc, "24a23cadbacc4ffed964"}, @timestamp={0x44, 0x18, 0xaa, 0x0, 0x5, [0x8001, 0x2, 0xffff, 0x1, 0x401]}, @noop, @end]}}}}}) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) write$P9_RRENAMEAT(r3, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000001240)={&(0x7f0000000240)=""/4096, 0x5000, 0x1800, 0x8, 0x4}, 0x20) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x210801, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000001280)={0xffffffffffffffff}, 0x80080) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f00000012c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) (async) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000001500)) (async) io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x9d3, r0, &(0x7f00000000c0)="fb5f67d2616b52b1e0f7dfe00c2a041b70a3b2b56687f99bced58d580b8a7656", 0x20, 0x0, 0x0, 0x2, r5}, &(0x7f0000000180)) 23:38:29 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r1 = socket(0x22, 0x5, 0x7) mmap$xdp(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x3000004, 0x4000010, r1, 0x80000000) 23:38:29 executing program 2: r0 = getgid() r1 = getgid() getgroups(0x6, &(0x7f0000000000)=[0xee01, r0, 0xee01, r1, 0xffffffffffffffff, 0x0]) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000000180)="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", 0x120, r3}, 0x68) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r4) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) getgid() (async) getgid() (async) getgroups(0x6, &(0x7f0000000000)=[0xee01, r0, 0xee01, r1, 0xffffffffffffffff, 0x0]) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000000180)="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", 0x120, r3}, 0x68) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r4) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) (async) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xd) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x585080, 0x0) pipe2$9p(&(0x7f0000000000), 0x84800) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000000c0)=""/162, &(0x7f0000000180)=0xa2) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xe) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf00000000000000, 0x12, r0, 0x0) 23:38:29 executing program 1: socketpair(0x0, 0x80003, 0x1, &(0x7f0000000080)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x200651, 0xffffffffffffffac) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10007, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r1 = socket(0x22, 0x5, 0x7) mmap$xdp(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x3000004, 0x4000010, r1, 0x80000000) 23:38:29 executing program 2: r0 = getgid() (async, rerun: 64) r1 = getgid() (rerun: 64) getgroups(0x6, &(0x7f0000000000)=[0xee01, r0, 0xee01, r1, 0xffffffffffffffff, 0x0]) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000000180)="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", 0x120, r3}, 0x68) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r4) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xf) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1f00000000000000, 0x12, r0, 0x0) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x585080, 0x0) pipe2$9p(&(0x7f0000000000), 0x84800) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000000c0)=""/162, &(0x7f0000000180)=0xa2) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x585080, 0x0) (async) pipe2$9p(&(0x7f0000000000), 0x84800) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000000c0)=""/162, &(0x7f0000000180)=0xa2) (async) 23:38:29 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) socket(0x22, 0x5, 0x7) (async) r1 = socket(0x22, 0x5, 0x7) mmap$xdp(&(0x7f0000ff0000/0xd000)=nil, 0xd000, 0x3000004, 0x4000010, r1, 0x80000000) 23:38:29 executing program 1: socketpair(0x0, 0x80003, 0x1, &(0x7f0000000080)) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x200651, 0xffffffffffffffac) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10007, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 23:38:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x21) 23:38:29 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x4) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@private=0xa010101, @loopback, 0xffffffffffffffff, "a1b2de8ccdd0439fdb9f62f7f24c70fce813dd3239a13ad8ab546502527e2d0f", 0x6c35, 0x6, 0x0, 0xffffff00}, 0x3c) 23:38:29 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000000000000, 0x12, r0, 0x0) 23:38:29 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x585080, 0x0) (async, rerun: 32) pipe2$9p(&(0x7f0000000000), 0x84800) (async, rerun: 32) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f00000000c0)=""/162, &(0x7f0000000180)=0xa2) 23:38:30 executing program 1: socketpair(0x0, 0x80003, 0x1, &(0x7f0000000080)) (async) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x200651, 0xffffffffffffffac) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r0, 0x0) (async) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10007, 0x0, &(0x7f0000ffc000/0x4000)=nil}) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x23) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x100000b, 0x12, r0, 0x6) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x4) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@private=0xa010101, @loopback, 0xffffffffffffffff, "a1b2de8ccdd0439fdb9f62f7f24c70fce813dd3239a13ad8ab546502527e2d0f", 0x6c35, 0x6, 0x0, 0xffffff00}, 0x3c) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2100000000000000, 0x12, r0, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xa00) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2300000000000000, 0x12, r0, 0x0) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x100000b, 0x12, r0, 0x6) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) mmap$usbmon(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x100000b, 0x12, r0, 0x6) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xd00) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200426bd7000fedbdf2510000075951e4afdd3151c63de03907799000500300000000000050033000100000008000600", @ANYRES32=0x0, @ANYBLOB='\b\x001\x00\b\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040081) 23:38:30 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x4) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@private=0xa010101, @loopback, 0xffffffffffffffff, "a1b2de8ccdd0439fdb9f62f7f24c70fce813dd3239a13ad8ab546502527e2d0f", 0x6c35, 0x6, 0x0, 0xffffff00}, 0x3c) 23:38:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000f, 0x20012, r0, 0x778b9d2a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)='%p \x00'}, 0x20) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfdffffffffff0700, 0x12, r0, 0x0) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x100000b, 0x12, r0, 0x6) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xe00) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200426bd7000fedbdf2510000075951e4afdd3151c63de03907799000500300000000000050033000100000008000600", @ANYRES32=0x0, @ANYBLOB='\b\x001\x00\b\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040081) (rerun: 64) 23:38:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000f, 0x20012, r0, 0x778b9d2a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)='%p \x00'}, 0x20) 23:38:30 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffff00000000, 0x12, r0, 0x0) 23:38:30 executing program 5: socket$igmp(0x2, 0x3, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @random="9a04ff15a444", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @random="cb2aceb261d0", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @remote]}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xf00) 23:38:30 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffff600000, 0x12, r0, 0x0) 23:38:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000f, 0x20012, r0, 0x778b9d2a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)='%p \x00'}, 0x20) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1f00) 23:38:30 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200426bd7000fedbdf2510000075951e4afdd3151c63de03907799000500300000000000050033000100000008000600", @ANYRES32=0x0, @ANYBLOB='\b\x001\x00\b\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040081) 23:38:30 executing program 5: socket$igmp(0x2, 0x3, 0x2) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @random="9a04ff15a444", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @random="cb2aceb261d0", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @remote]}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 5: socket$igmp(0x2, 0x3, 0x2) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @random="9a04ff15a444", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @random="cb2aceb261d0", @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @remote]}) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2) 23:38:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008, 0x13, r0, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000010500)=@generic={0x0, 0x10}, 0x18) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x10000000) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x800, 0x5b, "1e45e5f62103e1362fdd7d43bbeea306be72f849eb2ad22f2abae9e3edd202652e4c715570af9f5b617a40b09646caaee0eff4c88c7e557c41fb9e702c46279e11a669b20d8e1f508a3b13934ecad1e2b6886941c02135bdd88e3f"}) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5363, 0x80) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 5: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2100) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x4) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000e7109673c80610cc5ba6ed1b926e7500000000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r2, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1bc, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x804}, 0x4000001) 23:38:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008, 0x13, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008, 0x13, r0, 0x0) (async) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000010500)=@generic={0x0, 0x10}, 0x18) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x10000000) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x800, 0x5b, "1e45e5f62103e1362fdd7d43bbeea306be72f849eb2ad22f2abae9e3edd202652e4c715570af9f5b617a40b09646caaee0eff4c88c7e557c41fb9e702c46279e11a669b20d8e1f508a3b13934ecad1e2b6886941c02135bdd88e3f"}) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5363, 0x80) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 5: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000e7109673c80610cc5ba6ed1b926e7500000000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r2, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async, rerun: 64) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1bc, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x804}, 0x4000001) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000010500)=@generic={0x0, 0x10}, 0x18) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x10000000) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x800, 0x5b, "1e45e5f62103e1362fdd7d43bbeea306be72f849eb2ad22f2abae9e3edd202652e4c715570af9f5b617a40b09646caaee0eff4c88c7e557c41fb9e702c46279e11a669b20d8e1f508a3b13934ecad1e2b6886941c02135bdd88e3f"}) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5363, 0x80) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2300) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000e7109673c80610cc5ba6ed1b926e7500000000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r2, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1bc, r0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x804}, 0x4000001) 23:38:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008, 0x13, r0, 0x0) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xa) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x60ff) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000010500)=@generic={0x0, 0x10}, 0x18) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x10000000) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x800, 0x5b, "1e45e5f62103e1362fdd7d43bbeea306be72f849eb2ad22f2abae9e3edd202652e4c715570af9f5b617a40b09646caaee0eff4c88c7e557c41fb9e702c46279e11a669b20d8e1f508a3b13934ecad1e2b6886941c02135bdd88e3f"}) syz_open_dev$usbmon(&(0x7f00000000c0), 0x5363, 0x80) 23:38:30 executing program 5: ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xd) 23:38:30 executing program 1: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x3000)=nil) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r0, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20000) 23:38:30 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@rand_addr=0x64010101, 0x0, 0x0, 0x30, 0x0, [{@empty}, {@broadcast}, {@remote}]}}) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000010500)=@generic={0x0, 0x10}, 0x18) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x10000000) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x800, 0x5b, "1e45e5f62103e1362fdd7d43bbeea306be72f849eb2ad22f2abae9e3edd202652e4c715570af9f5b617a40b09646caaee0eff4c88c7e557c41fb9e702c46279e11a669b20d8e1f508a3b13934ecad1e2b6886941c02135bdd88e3f"}) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xe) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@rand_addr=0x64010101, 0x0, 0x0, 0x30, 0x0, [{@empty}, {@broadcast}, {@remote}]}}) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xf) 23:38:30 executing program 1: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x3000)=nil) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r0, 0x0) 23:38:30 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@rand_addr=0x64010101, 0x0, 0x0, 0x30, 0x0, [{@empty}, {@broadcast}, {@remote}]}}) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x800000) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000010500)=@generic={0x0, 0x10}, 0x18) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x10000000) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x800, 0x5b, "1e45e5f62103e1362fdd7d43bbeea306be72f849eb2ad22f2abae9e3edd202652e4c715570af9f5b617a40b09646caaee0eff4c88c7e557c41fb9e702c46279e11a669b20d8e1f508a3b13934ecad1e2b6886941c02135bdd88e3f"}) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x21) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000010500)=@generic={0x0, 0x10}, 0x18) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x10000000) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xe0ff20) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x23) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x10000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1000000) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xa00) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000010500)=@generic={0x0, 0x10}, 0x18) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xd00) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x10000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 1: prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ff9000/0x3000)=nil) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000004, 0x110, r0, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000000) 23:38:30 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x0, 0x0, {{0x38, 0x4, 0x3, 0x4, 0xe0, 0x65, 0x0, 0x2, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x17, 0x3, 0x3, [{@local, 0xfffffff7}, {@local, 0x7}]}, @lsrr={0x83, 0x7, 0xe9, [@empty]}, @timestamp_addr={0x44, 0x1c, 0x62, 0x1, 0x2, [{@broadcast, 0x1}, {@multicast2, 0x8}, {@rand_addr=0x64010101, 0x8000}]}, @timestamp_addr={0x44, 0xc, 0x22, 0x1, 0xf, [{@multicast2, 0x6}]}, @timestamp_prespec={0x44, 0x34, 0x9e, 0x3, 0xc, [{@multicast1, 0x9}, {@remote, 0x1ff}, {@multicast1, 0x2}, {@empty}, {@broadcast, 0x3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}]}, @timestamp={0x44, 0xc, 0x43, 0x0, 0xa, [0xffffffff, 0x1]}, @timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x5, [{@loopback, 0x7}, {@multicast2, 0x8}, {@private=0xa010102, 0x1}, {@loopback}, {@local, 0x9}, {@multicast1, 0x9}]}, @end, @ssrr={0x89, 0x13, 0xac, [@multicast2, @loopback, @empty, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x3b70, 0x80, 0x8001, 0xffff, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}]}}}}}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x7800, 0x5, 0xbe, {{0x22, 0x4, 0x3, 0x36, 0x88, 0x67, 0x0, 0x49, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x1c, 0xfd, 0x0, 0x0, [0x1, 0x6, 0x4, 0xffff, 0xaa, 0x4]}, @ssrr={0x89, 0x7, 0xc1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @generic={0x88, 0x7, "632ea6e8ee"}, @rr={0x7, 0xb, 0x12, [@local, @private=0xa010102]}, @noop, @rr={0x7, 0x13, 0xbf, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xae, 0x3, 0x0, [{@empty, 0x7f}, {@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}]}, @lsrr={0x83, 0xb, 0xab, [@loopback, @broadcast]}]}}}}}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x90) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r10, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r11, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r11, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wg1\x00', 0x0}) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r13, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r14, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r14, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r15 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r15, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r16}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000740)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x0, 0x90e, {{0x23, 0x4, 0x3, 0x39, 0x8c, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x24, 0x89, 0x0, 0x4, [0x22, 0xffffffff, 0xfffffff8, 0x7f, 0x0, 0xc33f, 0x6, 0x0]}, @generic={0x83, 0x7, "f637da9395"}, @generic={0x82, 0xd, "06934daf90e322e9de246f"}, @generic={0x88, 0x5, "6070fb"}, @lsrr={0x83, 0x27, 0x26, [@private=0xa010101, @private=0xa010100, @remote, @multicast1, @local, @multicast1, @broadcast, @loopback, @local]}, @end, @rr={0x7, 0xf, 0xa7, [@remote, @empty, @remote]}, @end]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000840)={0x7f8, 0x0, 0xc10, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r0}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc000000}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x29ca}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x330}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x45}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8, 0x7, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r14}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x56}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x81, 0x8, 0x6}, {0x1, 0xaa, 0x20, 0x9}]}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x20000010}, 0x4048880) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x10000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x10000) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x4000000) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xe00) 23:38:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x101, r0, &(0x7f0000000080)="29adef0f9492fc28a46f71f126ad3e9dfdc70538e99ebfffa7d162bd9aba5e65de3f17bc7bb3d9838c1ef030662d11f81d6da040ca9b4eb95a3348dcebe4b341d9835fa054cc9adb7e5d90b034055f05a333083bf5d48c27008222", 0x5b, 0x5, 0x0, 0x0, r1}, &(0x7f0000000140)) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) 23:38:30 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x0, 0x0, {{0x38, 0x4, 0x3, 0x4, 0xe0, 0x65, 0x0, 0x2, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x17, 0x3, 0x3, [{@local, 0xfffffff7}, {@local, 0x7}]}, @lsrr={0x83, 0x7, 0xe9, [@empty]}, @timestamp_addr={0x44, 0x1c, 0x62, 0x1, 0x2, [{@broadcast, 0x1}, {@multicast2, 0x8}, {@rand_addr=0x64010101, 0x8000}]}, @timestamp_addr={0x44, 0xc, 0x22, 0x1, 0xf, [{@multicast2, 0x6}]}, @timestamp_prespec={0x44, 0x34, 0x9e, 0x3, 0xc, [{@multicast1, 0x9}, {@remote, 0x1ff}, {@multicast1, 0x2}, {@empty}, {@broadcast, 0x3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}]}, @timestamp={0x44, 0xc, 0x43, 0x0, 0xa, [0xffffffff, 0x1]}, @timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x5, [{@loopback, 0x7}, {@multicast2, 0x8}, {@private=0xa010102, 0x1}, {@loopback}, {@local, 0x9}, {@multicast1, 0x9}]}, @end, @ssrr={0x89, 0x13, 0xac, [@multicast2, @loopback, @empty, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x3b70, 0x80, 0x8001, 0xffff, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x7800, 0x5, 0xbe, {{0x22, 0x4, 0x3, 0x36, 0x88, 0x67, 0x0, 0x49, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x1c, 0xfd, 0x0, 0x0, [0x1, 0x6, 0x4, 0xffff, 0xaa, 0x4]}, @ssrr={0x89, 0x7, 0xc1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @generic={0x88, 0x7, "632ea6e8ee"}, @rr={0x7, 0xb, 0x12, [@local, @private=0xa010102]}, @noop, @rr={0x7, 0x13, 0xbf, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xae, 0x3, 0x0, [{@empty, 0x7f}, {@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}]}, @lsrr={0x83, 0xb, 0xab, [@loopback, @broadcast]}]}}}}}) (rerun: 64) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x90) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r10, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r11, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r11, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wg1\x00', 0x0}) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r13, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r14, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r14, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) r15 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r15, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r16}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000740)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x0, 0x90e, {{0x23, 0x4, 0x3, 0x39, 0x8c, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x24, 0x89, 0x0, 0x4, [0x22, 0xffffffff, 0xfffffff8, 0x7f, 0x0, 0xc33f, 0x6, 0x0]}, @generic={0x83, 0x7, "f637da9395"}, @generic={0x82, 0xd, "06934daf90e322e9de246f"}, @generic={0x88, 0x5, "6070fb"}, @lsrr={0x83, 0x27, 0x26, [@private=0xa010101, @private=0xa010100, @remote, @multicast1, @local, @multicast1, @broadcast, @loopback, @local]}, @end, @rr={0x7, 0xf, 0xa7, [@remote, @empty, @remote]}, @end]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000840)={0x7f8, 0x0, 0xc10, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r0}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc000000}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x29ca}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x330}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x45}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8, 0x7, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r14}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x56}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x81, 0x8, 0x6}, {0x1, 0xaa, 0x20, 0x9}]}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x20000010}, 0x4048880) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:30 executing program 2: mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xf00) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xa000000) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffffff8c, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) socket$igmp6(0xa, 0x3, 0x2) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) io_setup(0x100, &(0x7f0000000000)=0x0) io_setup(0x100, &(0x7f0000000000)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) write$P9_RREMOVE(r3, &(0x7f00000003c0)={0x7, 0x7b, 0x2}, 0x7) io_cancel(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) io_cancel(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r4}, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x1, r5, &(0x7f00000000c0)="0de896b0de40c92e3f4f12a8933a681c201f4f8159e3b0955f677cebe8357243f4e61cfe79f99148c0b0e543fab655417264af7b465c40c7ca14fd785070be481c48d16863caa59f629170850e1625a6bda405eee534f72b9cc08e1383c320348233f5415287460303007a9aa563804b13bcc7ba813d8013fa0a9554", 0x7c, 0x5, 0x0, 0x2, r7}, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000a000000bc9dcdb80bab72f370494c90daba31e9b1ccf1d3f81341a7168e134ca5f2adc424f739b56047fddd0a724bbe5b490ee41aa1760801d222635d2bf2eec05be4163653b157dff02cf80e5e0fb828a2d27b377beb3f3cf9f6fac52afb0b9d39b93ed48decdb16b118c3752875ef98ea5e6a44645e7a3daab3c6a6eb4384c17e48439574af4bd241a92c4864fe967e11fad90c992bbdefe97dc9b54f1736541c16bbf34df0457ac08eaf92f696fa8499d44c0e29f1a3a1e586f6c01c"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x90) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, r6, 0xfffffffa, '\x00', r9, r10, 0x4, 0x4, 0x3}, 0x48) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000004c0)={0xf, 0x1f, 0x2, 0xbf}, 0xf) 23:38:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x101, r0, &(0x7f0000000080)="29adef0f9492fc28a46f71f126ad3e9dfdc70538e99ebfffa7d162bd9aba5e65de3f17bc7bb3d9838c1ef030662d11f81d6da040ca9b4eb95a3348dcebe4b341d9835fa054cc9adb7e5d90b034055f05a333083bf5d48c27008222", 0x5b, 0x5, 0x0, 0x0, r1}, &(0x7f0000000140)) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x101, r0, &(0x7f0000000080)="29adef0f9492fc28a46f71f126ad3e9dfdc70538e99ebfffa7d162bd9aba5e65de3f17bc7bb3d9838c1ef030662d11f81d6da040ca9b4eb95a3348dcebe4b341d9835fa054cc9adb7e5d90b034055f05a333083bf5d48c27008222", 0x5b, 0x5, 0x0, 0x0, r1}, &(0x7f0000000140)) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) 23:38:30 executing program 2: mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xd000000) 23:38:30 executing program 4: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x0, 0x0, {{0x38, 0x4, 0x3, 0x4, 0xe0, 0x65, 0x0, 0x2, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x17, 0x3, 0x3, [{@local, 0xfffffff7}, {@local, 0x7}]}, @lsrr={0x83, 0x7, 0xe9, [@empty]}, @timestamp_addr={0x44, 0x1c, 0x62, 0x1, 0x2, [{@broadcast, 0x1}, {@multicast2, 0x8}, {@rand_addr=0x64010101, 0x8000}]}, @timestamp_addr={0x44, 0xc, 0x22, 0x1, 0xf, [{@multicast2, 0x6}]}, @timestamp_prespec={0x44, 0x34, 0x9e, 0x3, 0xc, [{@multicast1, 0x9}, {@remote, 0x1ff}, {@multicast1, 0x2}, {@empty}, {@broadcast, 0x3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}]}, @timestamp={0x44, 0xc, 0x43, 0x0, 0xa, [0xffffffff, 0x1]}, @timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x5, [{@loopback, 0x7}, {@multicast2, 0x8}, {@private=0xa010102, 0x1}, {@loopback}, {@local, 0x9}, {@multicast1, 0x9}]}, @end, @ssrr={0x89, 0x13, 0xac, [@multicast2, @loopback, @empty, @remote]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x3b70, 0x80, 0x8001, 0xffff, {{0x6, 0x4, 0x2, 0x0, 0x18, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'erspan0\x00', &(0x7f00000005c0)={'gre0\x00', 0x0, 0x700, 0x7800, 0x5, 0xbe, {{0x22, 0x4, 0x3, 0x36, 0x88, 0x67, 0x0, 0x49, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x1c, 0xfd, 0x0, 0x0, [0x1, 0x6, 0x4, 0xffff, 0xaa, 0x4]}, @ssrr={0x89, 0x7, 0xc1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @generic={0x88, 0x7, "632ea6e8ee"}, @rr={0x7, 0xb, 0x12, [@local, @private=0xa010102]}, @noop, @rr={0x7, 0x13, 0xbf, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0xae, 0x3, 0x0, [{@empty, 0x7f}, {@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x4}]}, @lsrr={0x83, 0xb, 0xab, [@loopback, @broadcast]}]}}}}}) (async, rerun: 32) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x90) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r10, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r11, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r11, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wg1\x00', 0x0}) (async) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r13, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r14, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r14, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) (async) r15 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r15, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r16}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wg0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000740)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x0, 0x90e, {{0x23, 0x4, 0x3, 0x39, 0x8c, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x24, 0x89, 0x0, 0x4, [0x22, 0xffffffff, 0xfffffff8, 0x7f, 0x0, 0xc33f, 0x6, 0x0]}, @generic={0x83, 0x7, "f637da9395"}, @generic={0x82, 0xd, "06934daf90e322e9de246f"}, @generic={0x88, 0x5, "6070fb"}, @lsrr={0x83, 0x27, 0x26, [@private=0xa010101, @private=0xa010100, @remote, @multicast1, @local, @multicast1, @broadcast, @loopback, @local]}, @end, @rr={0x7, 0xf, 0xa7, [@remote, @empty, @remote]}, @end]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000840)={0x7f8, 0x0, 0xc10, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r0}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc000000}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x29ca}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x330}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x45}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8, 0x7, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r14}, {0x17c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x56}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}]}}, {{0x8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0x81, 0x8, 0x6}, {0x1, 0xaa, 0x20, 0x9}]}}}]}}]}, 0x7f8}, 0x1, 0x0, 0x0, 0x20000010}, 0x4048880) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x88200, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x101, r0, &(0x7f0000000080)="29adef0f9492fc28a46f71f126ad3e9dfdc70538e99ebfffa7d162bd9aba5e65de3f17bc7bb3d9838c1ef030662d11f81d6da040ca9b4eb95a3348dcebe4b341d9835fa054cc9adb7e5d90b034055f05a333083bf5d48c27008222", 0x5b, 0x5, 0x0, 0x0, r1}, &(0x7f0000000140)) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1f00) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0x810, r0, 0x10000000) 23:38:30 executing program 2: mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, 0xffffffffffffffff, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xe000000) 23:38:30 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x31040, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffffff8c, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) socket$igmp6(0xa, 0x3, 0x2) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) io_setup(0x100, &(0x7f0000000000)=0x0) io_setup(0x100, &(0x7f0000000000)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) write$P9_RREMOVE(r3, &(0x7f00000003c0)={0x7, 0x7b, 0x2}, 0x7) io_cancel(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) io_cancel(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r4}, 0x0) (async) io_cancel(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r4}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x1, r5, &(0x7f00000000c0)="0de896b0de40c92e3f4f12a8933a681c201f4f8159e3b0955f677cebe8357243f4e61cfe79f99148c0b0e543fab655417264af7b465c40c7ca14fd785070be481c48d16863caa59f629170850e1625a6bda405eee534f72b9cc08e1383c320348233f5415287460303007a9aa563804b13bcc7ba813d8013fa0a9554", 0x7c, 0x5, 0x0, 0x2, r7}, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000a000000bc9dcdb80bab72f370494c90daba31e9b1ccf1d3f81341a7168e134ca5f2adc424f739b56047fddd0a724bbe5b490ee41aa1760801d222635d2bf2eec05be4163653b157dff02cf80e5e0fb828a2d27b377beb3f3cf9f6fac52afb0b9d39b93ed48decdb16b118c3752875ef98ea5e6a44645e7a3daab3c6a6eb4384c17e48439574af4bd241a92c4864fe967e11fad90c992bbdefe97dc9b54f1736541c16bbf34df0457ac08eaf92f696fa8499d44c0e29f1a3a1e586f6c01c"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x90) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, r6, 0xfffffffa, '\x00', r9, r10, 0x4, 0x4, 0x3}, 0x48) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000004c0)={0xf, 0x1f, 0x2, 0xbf}, 0xf) (async) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000004c0)={0xf, 0x1f, 0x2, 0xbf}, 0xf) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0x810, r0, 0x10000000) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xf000000) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) 23:38:30 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x31040, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x31040, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2100) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1f000000) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2300) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000d, 0x810, r0, 0x10000000) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20000000) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) 23:38:30 executing program 5: syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffffff8c, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0xffffffffffffff8c, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) socket$igmp6(0xa, 0x3, 0x2) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) io_setup(0x100, &(0x7f0000000000)) (async) io_setup(0x100, &(0x7f0000000000)=0x0) io_setup(0x100, &(0x7f0000000000)=0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) write$P9_RREMOVE(r3, &(0x7f00000003c0)={0x7, 0x7b, 0x2}, 0x7) io_cancel(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) (async) io_cancel(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (async) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) io_cancel(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, r4}, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x1, r5, &(0x7f00000000c0)="0de896b0de40c92e3f4f12a8933a681c201f4f8159e3b0955f677cebe8357243f4e61cfe79f99148c0b0e543fab655417264af7b465c40c7ca14fd785070be481c48d16863caa59f629170850e1625a6bda405eee534f72b9cc08e1383c320348233f5415287460303007a9aa563804b13bcc7ba813d8013fa0a9554", 0x7c, 0x5, 0x0, 0x2, r7}, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000a000000bc9dcdb80bab72f370494c90daba31e9b1ccf1d3f81341a7168e134ca5f2adc424f739b56047fddd0a724bbe5b490ee41aa1760801d222635d2bf2eec05be4163653b157dff02cf80e5e0fb828a2d27b377beb3f3cf9f6fac52afb0b9d39b93ed48decdb16b118c3752875ef98ea5e6a44645e7a3daab3c6a6eb4384c17e48439574af4bd241a92c4864fe967e11fad90c992bbdefe97dc9b54f1736541c16bbf34df0457ac08eaf92f696fa8499d44c0e29f1a3a1e586f6c01c"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x90) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, r6, 0xfffffffa, '\x00', r9, r10, 0x4, 0x4, 0x3}, 0x48) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000004c0)={0xf, 0x1f, 0x2, 0xbf}, 0xf) 23:38:30 executing program 1: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x31040, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffdffffff, 0x133302) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x60ff) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffdffffff, 0x133302) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20000) 23:38:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x808000) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x21000000) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffdffffff, 0x133302) syz_open_dev$usbmon(&(0x7f0000000000), 0xfffffffffdffffff, 0x133302) (async) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000080)="4c07e1acd1b8d9021fea4771ffb1c1f2b3331b077e959942e1062d7bdb9812af46fc9644cf1be9df84a7858ea4a6fa776a4bb42d79c6757093d0c2e0574d961a8030178e4e61758874f80c974fd6c7bf3cdf1dd1ddf3d80faf8b124f59c4f7562da0ca71315d046210e3653c854fc58bf193f220", 0x74, 0x4, 0x0, 0x0, r2}, &(0x7f0000000100)) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x808000) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x800000) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x23000000) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xe0ff20) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000080)="4c07e1acd1b8d9021fea4771ffb1c1f2b3331b077e959942e1062d7bdb9812af46fc9644cf1be9df84a7858ea4a6fa776a4bb42d79c6757093d0c2e0574d961a8030178e4e61758874f80c974fd6c7bf3cdf1dd1ddf3d80faf8b124f59c4f7562da0ca71315d046210e3653c854fc58bf193f220", 0x74, 0x4, 0x0, 0x0, r2}, &(0x7f0000000100)) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) (async) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000080)="4c07e1acd1b8d9021fea4771ffb1c1f2b3331b077e959942e1062d7bdb9812af46fc9644cf1be9df84a7858ea4a6fa776a4bb42d79c6757093d0c2e0574d961a8030178e4e61758874f80c974fd6c7bf3cdf1dd1ddf3d80faf8b124f59c4f7562da0ca71315d046210e3653c854fc58bf193f220", 0x74, 0x4, 0x0, 0x0, r2}, &(0x7f0000000100)) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xff600000) 23:38:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x808000) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x110, r0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1000000) 23:38:30 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) io_setup(0x200, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x80800) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, 0x0) io_submit(r1, 0x7, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000080)="ba4901fb04415d4d765fa8889d6c8b2664de53677658c25d55e7eab3d5798edfc56d6107b2465662877cc06a83de19a0426736fcf03f312f0fa269731706bb4fe18bd36e569d33131139474c117a4f032973763e962ebc86d6a1e2e10f", 0x5d, 0x80000000, 0x0, 0x4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x1f, r2, &(0x7f0000000140)="229465d9369a9c4bae17490e6b53b199e74a260c95407e1badcd67dc0a17d9027e1a7ead7249e32ac1431c538fc3414cd0c348182efb158f2270002b6b2fb5935b7bb34bbdba90fceeb562f13ebdb8e4b24dcb794b072e3114ba51c2a7970156bcecf49bf0f1e06a1a694a972a876d2634177f9efbf09db9233ea536f5e1c9cc709eb7de733ea554ee73918cd45621312fe1648b223a2903eeb668eaf705e33356a7ba257318e985614d2bb7551b7d69a0b89ac6adc11b526829a0964a9ca34b9d32732c4769c0cded84890fb4f944a5ad4d8525b62deec6fec9faf6de42ab185ef51ebfa142306e5167cf29c88c48c3ada9cb61d0991e527629", 0xfa, 0xffff}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x2, r3, &(0x7f0000000280)="100f82dd6398826949592fccd82c06f1d4a7e6baffdaaaba408c24e808498f446d1da845d0eb0084e7fd2380fa0e2af15e14a2a3bf6de9a3a127068120534bb279c08dd4322bc9ccc2f203aa00e1a691f08ffaa043ffae2fbea9ab504022bbff8486819a06af70187370c413f7", 0x6d, 0x2, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, r4, &(0x7f0000000340)="5d65999d9771b7280591b621aee39ce0d60416ee9f6cf6ada109f03f7057fdd9bb3539a662e2cb73ee73b44aa77eb48f4d49a7b732385e7a8779f968681189d33544566bba7cfda55d48417bed784df75330bd5d4957ae03de5d1e76bc72b41b24ea6d0f8a6aaebd6968bb095b16288e9e0e234e3f4368cb6d5acaf628982a9befa738b76401df2431501447d29ccab22fdd5c68bebcdd442b249ced", 0x9c, 0x6, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0xff, 0xffffffffffffffff, &(0x7f0000000440)="3589293dcf3796007c3883b200f1c598254f171280309a7ad87d01d7ab31b3e6e8b05a241848baaca773cbcffdccb11b3cd3c005b944f275add3f1da48b6f709a87bcd99dccd0ce071ec0d1774aaf008f16b97e6de21c291adb397ca3ef9a6aeb508baf4bec029eb53e4fcebc9c5a3345b9dbb0f09718bc9a596c3a7072767012e0e44966adb3e230d46a3407ff423ba2227a5d4c5b9002c2a7cf708df6c250b1c0bcdc0348fa129080a3c114e295f4648c3b0554aaf101cd181b2a8f976cadffab525fc8a686898b87719abe504560adf01e9b5df2e5e1a4dbc11066ab0bac39c8651de075118557f054a98e28f32dc07dac2", 0xf3, 0x75, 0x0, 0x2, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f00000005c0)="7de9802e99a756ed4d42bfa868025b932ed667e3be8416765d5c4f67e0b5729ef4b89c5c260bb732047f49dfffbba70aa9fab3a85c732acd5d0780b4ebbc4633", 0x40, 0x5cc, 0x0, 0x3, r6}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x5, r7, &(0x7f0000000640)="ff8a5eeaa68f4c177034f32607fd47c7a9417a14764ed2ba6dfa11b8f93b82c7f1cdfd61eda4530bbc32f2a5ca2432bf109ccc262529cb67297af48ebc8b04b6dc0d29499b8896c0c4c59d322ab011b6ffc85a171c6f94ed84bc6811d285e6df110d38de4dcd71771201cfb64149f6e89fad171952e1", 0x76, 0x5, 0x0, 0x2}]) 23:38:30 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async, rerun: 32) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000080)="4c07e1acd1b8d9021fea4771ffb1c1f2b3331b077e959942e1062d7bdb9812af46fc9644cf1be9df84a7858ea4a6fa776a4bb42d79c6757093d0c2e0574d961a8030178e4e61758874f80c974fd6c7bf3cdf1dd1ddf3d80faf8b124f59c4f7562da0ca71315d046210e3653c854fc58bf193f220", 0x74, 0x4, 0x0, 0x0, r2}, &(0x7f0000000100)) (async, rerun: 64) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async, rerun: 64) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) (async) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2100000000) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000000) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x60ffffffffff) 23:38:30 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x12, r0, 0x0) 23:38:30 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x4000000) 23:38:30 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 23:38:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000000000000) 23:38:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async, rerun: 64) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (rerun: 64) io_setup(0x200, &(0x7f0000000000)=0x0) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x80800) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, 0x0) (async, rerun: 64) io_submit(r1, 0x7, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000080)="ba4901fb04415d4d765fa8889d6c8b2664de53677658c25d55e7eab3d5798edfc56d6107b2465662877cc06a83de19a0426736fcf03f312f0fa269731706bb4fe18bd36e569d33131139474c117a4f032973763e962ebc86d6a1e2e10f", 0x5d, 0x80000000, 0x0, 0x4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x1f, r2, &(0x7f0000000140)="229465d9369a9c4bae17490e6b53b199e74a260c95407e1badcd67dc0a17d9027e1a7ead7249e32ac1431c538fc3414cd0c348182efb158f2270002b6b2fb5935b7bb34bbdba90fceeb562f13ebdb8e4b24dcb794b072e3114ba51c2a7970156bcecf49bf0f1e06a1a694a972a876d2634177f9efbf09db9233ea536f5e1c9cc709eb7de733ea554ee73918cd45621312fe1648b223a2903eeb668eaf705e33356a7ba257318e985614d2bb7551b7d69a0b89ac6adc11b526829a0964a9ca34b9d32732c4769c0cded84890fb4f944a5ad4d8525b62deec6fec9faf6de42ab185ef51ebfa142306e5167cf29c88c48c3ada9cb61d0991e527629", 0xfa, 0xffff}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x2, r3, &(0x7f0000000280)="100f82dd6398826949592fccd82c06f1d4a7e6baffdaaaba408c24e808498f446d1da845d0eb0084e7fd2380fa0e2af15e14a2a3bf6de9a3a127068120534bb279c08dd4322bc9ccc2f203aa00e1a691f08ffaa043ffae2fbea9ab504022bbff8486819a06af70187370c413f7", 0x6d, 0x2, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, r4, &(0x7f0000000340)="5d65999d9771b7280591b621aee39ce0d60416ee9f6cf6ada109f03f7057fdd9bb3539a662e2cb73ee73b44aa77eb48f4d49a7b732385e7a8779f968681189d33544566bba7cfda55d48417bed784df75330bd5d4957ae03de5d1e76bc72b41b24ea6d0f8a6aaebd6968bb095b16288e9e0e234e3f4368cb6d5acaf628982a9befa738b76401df2431501447d29ccab22fdd5c68bebcdd442b249ced", 0x9c, 0x6, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0xff, 0xffffffffffffffff, &(0x7f0000000440)="3589293dcf3796007c3883b200f1c598254f171280309a7ad87d01d7ab31b3e6e8b05a241848baaca773cbcffdccb11b3cd3c005b944f275add3f1da48b6f709a87bcd99dccd0ce071ec0d1774aaf008f16b97e6de21c291adb397ca3ef9a6aeb508baf4bec029eb53e4fcebc9c5a3345b9dbb0f09718bc9a596c3a7072767012e0e44966adb3e230d46a3407ff423ba2227a5d4c5b9002c2a7cf708df6c250b1c0bcdc0348fa129080a3c114e295f4648c3b0554aaf101cd181b2a8f976cadffab525fc8a686898b87719abe504560adf01e9b5df2e5e1a4dbc11066ab0bac39c8651de075118557f054a98e28f32dc07dac2", 0xf3, 0x75, 0x0, 0x2, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f00000005c0)="7de9802e99a756ed4d42bfa868025b932ed667e3be8416765d5c4f67e0b5729ef4b89c5c260bb732047f49dfffbba70aa9fab3a85c732acd5d0780b4ebbc4633", 0x40, 0x5cc, 0x0, 0x3, r6}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x5, r7, &(0x7f0000000640)="ff8a5eeaa68f4c177034f32607fd47c7a9417a14764ed2ba6dfa11b8f93b82c7f1cdfd61eda4530bbc32f2a5ca2432bf109ccc262529cb67297af48ebc8b04b6dc0d29499b8896c0c4c59d322ab011b6ffc85a171c6f94ed84bc6811d285e6df110d38de4dcd71771201cfb64149f6e89fad171952e1", 0x76, 0x5, 0x0, 0x2}]) (rerun: 64) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 23:38:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:31 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x8000000) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x7fffffffffffd) 23:38:31 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x80000) 23:38:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x80000000000000) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x0) (async) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xa000000) 23:38:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 23:38:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) io_setup(0x200, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x80800) (async) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, 0x0) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, 0x0) (async) io_submit(r1, 0x7, &(0x7f0000000700)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000080)="ba4901fb04415d4d765fa8889d6c8b2664de53677658c25d55e7eab3d5798edfc56d6107b2465662877cc06a83de19a0426736fcf03f312f0fa269731706bb4fe18bd36e569d33131139474c117a4f032973763e962ebc86d6a1e2e10f", 0x5d, 0x80000000, 0x0, 0x4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x1f, r2, &(0x7f0000000140)="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", 0xfa, 0xffff}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x2, r3, &(0x7f0000000280)="100f82dd6398826949592fccd82c06f1d4a7e6baffdaaaba408c24e808498f446d1da845d0eb0084e7fd2380fa0e2af15e14a2a3bf6de9a3a127068120534bb279c08dd4322bc9ccc2f203aa00e1a691f08ffaa043ffae2fbea9ab504022bbff8486819a06af70187370c413f7", 0x6d, 0x2, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, r4, &(0x7f0000000340)="5d65999d9771b7280591b621aee39ce0d60416ee9f6cf6ada109f03f7057fdd9bb3539a662e2cb73ee73b44aa77eb48f4d49a7b732385e7a8779f968681189d33544566bba7cfda55d48417bed784df75330bd5d4957ae03de5d1e76bc72b41b24ea6d0f8a6aaebd6968bb095b16288e9e0e234e3f4368cb6d5acaf628982a9befa738b76401df2431501447d29ccab22fdd5c68bebcdd442b249ced", 0x9c, 0x6, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0xff, 0xffffffffffffffff, &(0x7f0000000440)="3589293dcf3796007c3883b200f1c598254f171280309a7ad87d01d7ab31b3e6e8b05a241848baaca773cbcffdccb11b3cd3c005b944f275add3f1da48b6f709a87bcd99dccd0ce071ec0d1774aaf008f16b97e6de21c291adb397ca3ef9a6aeb508baf4bec029eb53e4fcebc9c5a3345b9dbb0f09718bc9a596c3a7072767012e0e44966adb3e230d46a3407ff423ba2227a5d4c5b9002c2a7cf708df6c250b1c0bcdc0348fa129080a3c114e295f4648c3b0554aaf101cd181b2a8f976cadffab525fc8a686898b87719abe504560adf01e9b5df2e5e1a4dbc11066ab0bac39c8651de075118557f054a98e28f32dc07dac2", 0xf3, 0x75, 0x0, 0x2, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f00000005c0)="7de9802e99a756ed4d42bfa868025b932ed667e3be8416765d5c4f67e0b5729ef4b89c5c260bb732047f49dfffbba70aa9fab3a85c732acd5d0780b4ebbc4633", 0x40, 0x5cc, 0x0, 0x3, r6}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x5, 0x5, r7, &(0x7f0000000640)="ff8a5eeaa68f4c177034f32607fd47c7a9417a14764ed2ba6dfa11b8f93b82c7f1cdfd61eda4530bbc32f2a5ca2432bf109ccc262529cb67297af48ebc8b04b6dc0d29499b8896c0c4c59d322ab011b6ffc85a171c6f94ed84bc6811d285e6df110d38de4dcd71771201cfb64149f6e89fad171952e1", 0x76, 0x5, 0x0, 0x2}]) 23:38:31 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async, rerun: 64) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x80000) (rerun: 64) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xd000000) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xe0ff2000000000) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) 23:38:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x100000000000000) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xe000000) 23:38:31 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x5b0fce1f63fb3537, 0xcf9, 0x6, {{0x2c, 0x4, 0x0, 0x10, 0xb0, 0x68, 0x0, 0x8, 0x29, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x1c, 0x3, 0x1, [{@private=0xa010100, 0x101}, {@multicast1, 0x5}, {@private=0xa010101, 0x7ff}]}, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x40}, {@local, 0x40}]}, @generic={0x7, 0x8, "f39d9bf03b8e"}, @ssrr={0x89, 0x1f, 0x9a, [@remote, @multicast2, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xe9}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x36, 0x3, 0x3, [{@empty, 0x2}]}, @rr={0x7, 0x1b, 0xe5, [@empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @multicast1]}, @lsrr={0x83, 0x1b, 0x3e, [@dev={0xac, 0x14, 0x14, 0x27}, @local, @multicast1, @rand_addr=0x64010100, @empty, @local]}, @noop, @end]}}}}}) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0xa, 0x4) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000240)={r1, 0x0, 0xdd, 0x0, &(0x7f0000000080)="4d0cbcc99c4beb68502e3fba0066877b3b0a46b1d66ffe3e6d6792ce99848d4d57dfe76e517dd4bd0a39f48dbcfdf7ea9beaa547ec457ad7afb4668a4fc4d139d2b2f305746d2473c62f581ad513e679be169fee7f013a88d02e5f7d706f357dbd4a9af8fe44a13da441b93170245691f30abde787f0473dbdc69d9c1a04ca6a097f2420ed15166d3cb0f7055c4ed2b5e77671c8e4fd8df010e6a80cc46f5381fc327991bfabacb690e29795b4208b39e515de44922c10c763e1ee5a570238f49ad918796426d5d2989e2548a77d619961346b0f859a3b37ba7fdc4b85", 0x0, 0x1, 0x0, 0xb2, 0x0, &(0x7f0000000180)="ebea2f009da6aac17a99f42ba0401ed22105d63f669b22304a55c87777b861f36d15fe64bedfffecfd7ab48952450d70278984c61e93b86e52741c933a895402d533d5527426ec7e26efb2dce4024cd777ad856dd624c1de6c48f61198732a4765b9273e5e8c5c8d1611c2b3af5196707e93d2f2e534127bdb2b77f0fe5d2c313a6e4d514e464593303ea45f113384032b2bd68c6bf7977509e590c3782142e6545c9758979f26e59e352cf57bf4867d3bb6", 0x0, 0x2, 0x0, 0x9}, 0x50) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x8}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x200000000000000) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xf000000) 23:38:31 executing program 1: syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x8200) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x400, 0x103182) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4850) 23:38:31 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x400000000000000) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x5b0fce1f63fb3537, 0xcf9, 0x6, {{0x2c, 0x4, 0x0, 0x10, 0xb0, 0x68, 0x0, 0x8, 0x29, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x1c, 0x3, 0x1, [{@private=0xa010100, 0x101}, {@multicast1, 0x5}, {@private=0xa010101, 0x7ff}]}, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x40}, {@local, 0x40}]}, @generic={0x7, 0x8, "f39d9bf03b8e"}, @ssrr={0x89, 0x1f, 0x9a, [@remote, @multicast2, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xe9}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x36, 0x3, 0x3, [{@empty, 0x2}]}, @rr={0x7, 0x1b, 0xe5, [@empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @multicast1]}, @lsrr={0x83, 0x1b, 0x3e, [@dev={0xac, 0x14, 0x14, 0x27}, @local, @multicast1, @rand_addr=0x64010100, @empty, @local]}, @noop, @end]}}}}}) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0xa, 0x4) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000240)={r1, 0x0, 0xdd, 0x0, &(0x7f0000000080)="4d0cbcc99c4beb68502e3fba0066877b3b0a46b1d66ffe3e6d6792ce99848d4d57dfe76e517dd4bd0a39f48dbcfdf7ea9beaa547ec457ad7afb4668a4fc4d139d2b2f305746d2473c62f581ad513e679be169fee7f013a88d02e5f7d706f357dbd4a9af8fe44a13da441b93170245691f30abde787f0473dbdc69d9c1a04ca6a097f2420ed15166d3cb0f7055c4ed2b5e77671c8e4fd8df010e6a80cc46f5381fc327991bfabacb690e29795b4208b39e515de44922c10c763e1ee5a570238f49ad918796426d5d2989e2548a77d619961346b0f859a3b37ba7fdc4b85", 0x0, 0x1, 0x0, 0xb2, 0x0, &(0x7f0000000180)="ebea2f009da6aac17a99f42ba0401ed22105d63f669b22304a55c87777b861f36d15fe64bedfffecfd7ab48952450d70278984c61e93b86e52741c933a895402d533d5527426ec7e26efb2dce4024cd777ad856dd624c1de6c48f61198732a4765b9273e5e8c5c8d1611c2b3af5196707e93d2f2e534127bdb2b77f0fe5d2c313a6e4d514e464593303ea45f113384032b2bd68c6bf7977509e590c3782142e6545c9758979f26e59e352cf57bf4867d3bb6", 0x0, 0x2, 0x0, 0x9}, 0x50) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x8}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1f000000) 23:38:31 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x80000) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20000000) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x800000000000000) 23:38:31 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000003c0)={'sit0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x5b0fce1f63fb3537, 0xcf9, 0x6, {{0x2c, 0x4, 0x0, 0x10, 0xb0, 0x68, 0x0, 0x8, 0x29, 0x0, @local, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x1c, 0x3, 0x1, [{@private=0xa010100, 0x101}, {@multicast1, 0x5}, {@private=0xa010101, 0x7ff}]}, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x40}, {@local, 0x40}]}, @generic={0x7, 0x8, "f39d9bf03b8e"}, @ssrr={0x89, 0x1f, 0x9a, [@remote, @multicast2, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xe9}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0xc, 0x36, 0x3, 0x3, [{@empty, 0x2}]}, @rr={0x7, 0x1b, 0xe5, [@empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @multicast1]}, @lsrr={0x83, 0x1b, 0x3e, [@dev={0xac, 0x14, 0x14, 0x27}, @local, @multicast1, @rand_addr=0x64010100, @empty, @local]}, @noop, @end]}}}}}) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000000)=0xa, 0x4) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000240)={r1, 0x0, 0xdd, 0x0, &(0x7f0000000080)="4d0cbcc99c4beb68502e3fba0066877b3b0a46b1d66ffe3e6d6792ce99848d4d57dfe76e517dd4bd0a39f48dbcfdf7ea9beaa547ec457ad7afb4668a4fc4d139d2b2f305746d2473c62f581ad513e679be169fee7f013a88d02e5f7d706f357dbd4a9af8fe44a13da441b93170245691f30abde787f0473dbdc69d9c1a04ca6a097f2420ed15166d3cb0f7055c4ed2b5e77671c8e4fd8df010e6a80cc46f5381fc327991bfabacb690e29795b4208b39e515de44922c10c763e1ee5a570238f49ad918796426d5d2989e2548a77d619961346b0f859a3b37ba7fdc4b85", 0x0, 0x1, 0x0, 0xb2, 0x0, &(0x7f0000000180)="ebea2f009da6aac17a99f42ba0401ed22105d63f669b22304a55c87777b861f36d15fe64bedfffecfd7ab48952450d70278984c61e93b86e52741c933a895402d533d5527426ec7e26efb2dce4024cd777ad856dd624c1de6c48f61198732a4765b9273e5e8c5c8d1611c2b3af5196707e93d2f2e534127bdb2b77f0fe5d2c313a6e4d514e464593303ea45f113384032b2bd68c6bf7977509e590c3782142e6545c9758979f26e59e352cf57bf4867d3bb6", 0x0, 0x2, 0x0, 0x9}, 0x50) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x8}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 23:38:31 executing program 1: syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x8200) (async) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x8200) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x400, 0x103182) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4850) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x20ffe000) 23:38:31 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xa00000000000000) 23:38:31 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={r0, 0x0, 0xab, 0x0, &(0x7f0000000080)="79ba322255edae62f79b6e4757a0a151ba7858d2aa45a523b0a080d1da3db048037cefad1288f6b95a9eeb8dce6205b4144d9299d559f3f76b393b53a44e560c5fea4feda17d83826d7dabf1d302eeeb98bce32642c16fcc015d0390888809cf2bcb83c2730ed23a5c46cc3f0b4f7ffd32a16dab224a53e18c67d99215cd1438dc32b10af12ac27547a7732ca342b94ccdc7a6ede7758abfc45366f9683cb235b7d79c51597cf3e18f681c", 0x0, 0x1, 0x0, 0xac, 0x0, &(0x7f0000000140)="deed3f88d8203391258e16a62fdc1d4aa01a5c446a0a1f234197220de224ca1f1d2f34d15484ac25ad4d83541d352d427ba366e65abe39a35abff623d74307e90a4164f8b9f0bc3c5e39d6a42e1500fa4e61391993d668211feff9728d5deb153a642425fa1398419231f71bb0d643ca87f4793b515fad43cfc53c37bffa5c84c967c078ffb8f836ea73ec00d718d55ecf0b1c00937ce81aa5f6eab89eb4371e1e6dcac8ef145bbaa6577a4f", 0x0, 0x2, 0x0, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x700, 0x20, 0x0, 0x80000001, {{0x31, 0x4, 0x0, 0x12, 0xc4, 0x65, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x8f, 0x1, 0x4, [{@multicast1, 0x20}]}, @timestamp_prespec={0x44, 0x14, 0xd6, 0x3, 0x2, [{@multicast2, 0x20}, {@rand_addr=0x64010100, 0x7f}]}, @rr={0x7, 0x17, 0x33, [@loopback, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}]}, @lsrr={0x83, 0x7, 0x18, [@rand_addr=0x64010102]}, @cipso={0x86, 0x17, 0x0, [{0x6, 0xf, "d977df0103a8ac23d0fb923018"}, {0x6, 0x2}]}, @end, @end, @timestamp_addr={0x44, 0x54, 0x54, 0x1, 0x6, [{@broadcast}, {@broadcast, 0x1e}, {@private=0xa010100, 0xffffffff}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2}, {@loopback, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x1}, {@local, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@broadcast, 0x1f}]}]}}}}}) 23:38:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x20010, r0, 0x80000000) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x21000000) 23:38:31 executing program 1: syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x8200) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x400, 0x103182) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x400, 0x103182) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4850) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x23000000) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xd00000000000000) 23:38:31 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={r0, 0x0, 0xab, 0x0, &(0x7f0000000080)="79ba322255edae62f79b6e4757a0a151ba7858d2aa45a523b0a080d1da3db048037cefad1288f6b95a9eeb8dce6205b4144d9299d559f3f76b393b53a44e560c5fea4feda17d83826d7dabf1d302eeeb98bce32642c16fcc015d0390888809cf2bcb83c2730ed23a5c46cc3f0b4f7ffd32a16dab224a53e18c67d99215cd1438dc32b10af12ac27547a7732ca342b94ccdc7a6ede7758abfc45366f9683cb235b7d79c51597cf3e18f681c", 0x0, 0x1, 0x0, 0xac, 0x0, &(0x7f0000000140)="deed3f88d8203391258e16a62fdc1d4aa01a5c446a0a1f234197220de224ca1f1d2f34d15484ac25ad4d83541d352d427ba366e65abe39a35abff623d74307e90a4164f8b9f0bc3c5e39d6a42e1500fa4e61391993d668211feff9728d5deb153a642425fa1398419231f71bb0d643ca87f4793b515fad43cfc53c37bffa5c84c967c078ffb8f836ea73ec00d718d55ecf0b1c00937ce81aa5f6eab89eb4371e1e6dcac8ef145bbaa6577a4f", 0x0, 0x2, 0x0, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x700, 0x20, 0x0, 0x80000001, {{0x31, 0x4, 0x0, 0x12, 0xc4, 0x65, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x8f, 0x1, 0x4, [{@multicast1, 0x20}]}, @timestamp_prespec={0x44, 0x14, 0xd6, 0x3, 0x2, [{@multicast2, 0x20}, {@rand_addr=0x64010100, 0x7f}]}, @rr={0x7, 0x17, 0x33, [@loopback, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}]}, @lsrr={0x83, 0x7, 0x18, [@rand_addr=0x64010102]}, @cipso={0x86, 0x17, 0x0, [{0x6, 0xf, "d977df0103a8ac23d0fb923018"}, {0x6, 0x2}]}, @end, @end, @timestamp_addr={0x44, 0x54, 0x54, 0x1, 0x6, [{@broadcast}, {@broadcast, 0x1e}, {@private=0xa010100, 0xffffffff}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2}, {@loopback, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x1}, {@local, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@broadcast, 0x1f}]}]}}}}}) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x20010, r0, 0x80000000) 23:38:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xe00000000000000) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xff600000) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x20010, r0, 0x80000000) 23:38:31 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={r0, 0x0, 0xab, 0x0, &(0x7f0000000080)="79ba322255edae62f79b6e4757a0a151ba7858d2aa45a523b0a080d1da3db048037cefad1288f6b95a9eeb8dce6205b4144d9299d559f3f76b393b53a44e560c5fea4feda17d83826d7dabf1d302eeeb98bce32642c16fcc015d0390888809cf2bcb83c2730ed23a5c46cc3f0b4f7ffd32a16dab224a53e18c67d99215cd1438dc32b10af12ac27547a7732ca342b94ccdc7a6ede7758abfc45366f9683cb235b7d79c51597cf3e18f681c", 0x0, 0x1, 0x0, 0xac, 0x0, &(0x7f0000000140)="deed3f88d8203391258e16a62fdc1d4aa01a5c446a0a1f234197220de224ca1f1d2f34d15484ac25ad4d83541d352d427ba366e65abe39a35abff623d74307e90a4164f8b9f0bc3c5e39d6a42e1500fa4e61391993d668211feff9728d5deb153a642425fa1398419231f71bb0d643ca87f4793b515fad43cfc53c37bffa5c84c967c078ffb8f836ea73ec00d718d55ecf0b1c00937ce81aa5f6eab89eb4371e1e6dcac8ef145bbaa6577a4f", 0x0, 0x2, 0x0, 0x1}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x700, 0x20, 0x0, 0x80000001, {{0x31, 0x4, 0x0, 0x12, 0xc4, 0x65, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x8f, 0x1, 0x4, [{@multicast1, 0x20}]}, @timestamp_prespec={0x44, 0x14, 0xd6, 0x3, 0x2, [{@multicast2, 0x20}, {@rand_addr=0x64010100, 0x7f}]}, @rr={0x7, 0x17, 0x33, [@loopback, @local, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}]}, @lsrr={0x83, 0x7, 0x18, [@rand_addr=0x64010102]}, @cipso={0x86, 0x17, 0x0, [{0x6, 0xf, "d977df0103a8ac23d0fb923018"}, {0x6, 0x2}]}, @end, @end, @timestamp_addr={0x44, 0x54, 0x54, 0x1, 0x6, [{@broadcast}, {@broadcast, 0x1e}, {@private=0xa010100, 0xffffffff}, {@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x2}, {@loopback, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x1}, {@local, 0x1000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@broadcast, 0x1f}]}]}}}}}) 23:38:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r0, 0x80) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2100000000) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xf00000000000000) 23:38:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x60ffffffffff, 0x12, r0, 0x0) 23:38:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r0, 0x80) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r0, 0x80) (async) 23:38:31 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffff01, 0x0) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1500000000000000) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1f00000000000000) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x60ffffffffff) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x4) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:31 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffff01, 0x0) 23:38:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r0, 0x80) 23:38:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1500000000000000) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000000000000000) 23:38:31 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffff01, 0x0) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x4) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:31 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x0) 23:38:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x200f, 0x0, 0x12, r0, 0x0) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000000000000) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x7fffffffffffd) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2100000000000000) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x101, 0x301000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x1fffff, 0x0, 0x12, r0, 0x0) 23:38:31 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000bdbe00521bd061ee6fcc619b4d0047d783d48178d27f9324dbdbdbd7a70a47194c47f7303c7ab6ae90bb8da8d470b3b1d117518a1e5feaff4b9070d20c63c7af6e9b882e6fae6edc7ae7b989cde17d4ff7846e8b83b783b8bce8041d85abed36295cbf0ed969c6bb273144ca1ee7b55342bc5ffbb56a88eb18a7fe33b05c01795f1d6ecc2ffaa5cfbc82c54573361af148cbba15d62a49a5ec87c88cd766948643c34d3ea679547d"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'gretap0\x00', r4, 0x10, 0x8000, 0x2, 0x7, {{0x2f, 0x4, 0x0, 0x15, 0xbc, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xd4, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xee02}, {@multicast2, 0x9}, {@rand_addr=0x64010101, 0x10001}, {@local, 0x800}, {@empty, 0x3c}]}, @cipso={0x86, 0x5c, 0x2, [{0x7, 0x6, "06e0c2ec"}, {0x1, 0x12, "01a7ffb7d86ba7cba5a8d048eb014799"}, {0x1, 0x12, "a3dfd2d4f93882d15e5f02741651f057"}, {0x0, 0x11, "4aaa0b42419400915850976fdb8258"}, {0x6, 0x7, "b789fe0b18"}, {0x6, 0xb, "19f13191c5d72d65a3"}, {0x2, 0x9, "e03b9c96a830b4"}]}, @timestamp_addr={0x44, 0x14, 0xa7, 0x1, 0xe, [{@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}]}, @generic={0x82, 0x7, "9d67e56330"}, @end, @noop]}}}}}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x88000) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x3800, r1, &(0x7f00000001c0)="e797fa5ec763582fb91499e42fa4342ef63f94632bd346c65cb9b8435aab3291102419286ed1661cf3c737f15acad9e4965160285cb2dcb88cc560b464e37c1f3a7fb17ff8e311ca515d38896c82d285484d0e53f16cd9df1b2fafc658faffbf7a660f522574daf4a5805502", 0x6c, 0x8000, 0x0, 0x0, r7}, &(0x7f0000000140)) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000680)={'gretap0\x00', &(0x7f0000000640)={'erspan0\x00', r5, 0x7800, 0x700, 0x8, 0x9, {{0x8, 0x4, 0x2, 0x29, 0x20, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @loopback, {[@ssrr={0x89, 0xb, 0xc4, [@dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r12, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f00000004c0)={'syztnl1\x00', r13, 0x7800, 0x10, 0x200, 0x7, {{0xa, 0x4, 0x1, 0x1e, 0x28, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0xc7, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', r13, 0x0, 0x0, 0x0, 0x0, {{0x12, 0x4, 0x0, 0x0, 0x48, 0x66, 0x0, 0x80, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x0, 0x2}, @ssrr={0x89, 0x13, 0xaf, [@rand_addr=0x64010100, @remote, @empty, @multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x6b, 0x1, 0x1, [{@loopback, 0x7fffffff}, {@local}]}, @lsrr={0x83, 0x7, 0x27, [@loopback]}]}}}}}) r14 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r14, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r15}, 0x90) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000740)={0x560, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x885}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf9e}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x150, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfe1, 0x6, 0x9, 0x9}, {0x7, 0xff, 0x8}, {0xf9, 0x1f, 0xaf, 0xde4}, {0x81, 0xbc, 0x1, 0x9}, {0x5, 0x4, 0x6}, {0x7c38, 0x2, 0x3}, {0x9, 0x5, 0x6, 0x8}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc00}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r13}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x764}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}]}, 0x560}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, 0x0) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000180)=0x6, 0x4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4880004}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) socket(0x11, 0x1, 0x2) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000000)) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x533302) 23:38:31 executing program 4: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x7}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) io_submit(0x0, 0x1, &(0x7f0000001100)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f00000000c0)="e333245a6458f2d9400ad6c27a4e15bee138798a36c3099181cb0c5edaee3e68ea68f75596b0fa0795b6d0873f2ead836636040bba357827caac01defba148328526e94f88414bf2e22565b75efc79f15a2efbc0e2eba8cb12a3197ab76a2a8642769f553d3216bb883dd956fc6a1a9e4b274fbb865275a3081266d88e80b471bbee9c0d1b53d735d103e48a473af319bde20156a39e8f57d555be348e456b9d106922e1738121e27db6f1e1fb02a017a47468dc995d407f5c3e7729ffd644ff80d038783562bae8f826dc15c356327954fb1019d42d0615c5a2387f0dafbd1edb71b8ddc3f3bb43ae8bf0eff62f39e2980467d4f0beec40f25d961581d33bfda9f4373cea12d44617ac56dff2655b9432c61c5afad45a0adb632667bfb01e1d3f13fb137d7163059f6d438901fe08ab47e6e1963e66996b09769325da6de70c7fe8585b09bf6c77a56554a158ba2d2b10d549aa31818961f28485ee9c4110be33614199598f85e4af5aac17784822fd88106a2c338c92b34220a2ff0962f56e3ab438c26b6b8524d27ad13fe6a1faf9e3ccb7298551e64190877f6f30b69b4f80aa2f50da61bd5b28cbe3e5f3da9d0169ea446620438bf55d0f0a8f93ff31150496628a64dfbecaccb21a7bcb5d558cfadd9fc896d1003b78a3c157afad477c1a5607180a110b7251234d00cf3ab76f91d2a6f6cf4a5ad7d3ad4686b06ec254176b329cc18a9b238b454cc5b72de5515091b277ace870616b4a3c8cfa67c06f166285d9207ffc420e8664870c4b17b0755f0dddc6ab1a4e72243520fc086d08185d9f98ba4a0f143c1ff9c200301d431fab9fc02ed17cfe162b53adcb9d8a105f352fae02245ac96cc947003cb1fff1f7adec785c632106afbcb88705b6b10c657f6600dc2e94286912a8e12eb7e55ca53ebff3f8e49250d0d358cce02ed3801fcd1c406bd044c867f63fde6baaa7f67d7c6b123c822ccfff42469a4f1d60df780840819936fe1332376607faae9e7c3c5352e9ddd982c6dc328ba9fb80ce107b96eaba1b6d07d23f5c2d0991a3c7055e1bacaab69a68e0c80f58dc453ad7c8d8b3b31977f12cd78ec58e4288518567c97f47ccfa0109f762036e4c9bfb2d6621890ae8d967d16987475f00e22ce1146a267c5a072694c1e547067236ca69f2212d3dd0d181eec9d963132b4f35eb060c80319056a68a0271d3357a963c2dc63757e78ad2031793aa6d0a46122631bdd77b8f2a835d2e362c923006b05bcf3f05f3c06aeabf68c073f345ba860d62f8f34716a467759a9d9efc38834f15c36445fd99c8b2645b38b52575b1860d5ae45569774ec1f431374dece4db1f7c69db58bf15c4a2c167db29ac59bee3711be8f0e334740e2ce94134d5377069f01dd8317516bd5562fd5541ad71714af579b2dd33c06f0c01af9859becb5ebf2df247af8e6c860b73f691acacf44bb6e33c40b21d1ad45c02e68ae798552241ba678afd2c0aababb8cbd5a97d7e39a9f1882743c051a0badaa2490c499e0fad2aa9fc6b723f866b1299e5e53347d5acee39fac5c7240c1b2b59c27620e9c49a128a02713f1df21af1c91647be98eca77c8d7e58eace9473436482dde7f905add39548205c55afa97f9f3dbc91193d52c80b459e12d08615040edbe4a91342c2f3167b5693dfd0ef778ad6bd97bf39b36d59e30fe4bec8992e62726408d2404e111eb91985187a721cbd9d0194ed208d1e6e618944387127c3c81698e2335f75947e816756e311a2a2545353dcb766274e4cc217f0690ea2e8b2cd29997a52a01d76997ffa732b3f51ca168e999c3709672470c31aa1a8093743f5d3f347436917c2b549f29eb40a5b1619c14ea050d0e036a3dd4f16e7842e7fa808352679b9780103be2e7b6d0dc2ace1a53a5230b274300818171cf521d4f361f43d0f8d1083b612ae79e19bfd4703e7880462721520795381b80b17f323e92b19b60a34e8d4e2ae0862d3a8fb44acecca3de7db328fe8006f9cb75cd63e418484c2034f07bcbb2d73dbe3a10804cde83ff7d46378adfa22fb872336777979fcaaf2115575e134913af76f91cbb1c20ddf6e4ee46680cef535a9af9bd7a152ea30319b9e7c5c5e735449ae233190843b0add9cb96dd88c71c87dfa4b863c3ff24f8c5f077ceab391bfb1b91c73fe2168f39f4b0160fb01cb02f6493420718918037275bcb372427c2fd8df436970136da12cb12ab584ffb3987e66ade0f49c4aeef9be0940edb96719f30d6b498184c05679a7716f322adf367f9d886fbc5a06a07199125da4bcdf97849e286917669f0de889c6704dc4682fc94d3e9ee3d1eb80de27a42c7caa77808b64b7d0bef992a897efb32570fc256f5a028e839e8eb935684c9406db8b5372ae23236f702327b7cc98b03d41b781f597e8fecd61c6440828bc6f7502b06b61197a3e284090c1ba42deb9d2025f8c7b098ce3d43034a0f5d973fcb7fcc8ee528a59591a76de0f7c496fee6687a1fc8625d0c327406b69e51d205ead8353e204a84ee9c21113fc8a0fc51374d5cec2767e79534bd5708570c5df99127fb41b501a70bb50dd0f8aacf09302db21d3ccc0684a06073187ab4fd48b27be330567097b8f094f3447f026a55fe5588db0d0588302b053fc4fae5ad0cc488fe5cbaad9a9abddda3ad2e8a03da8a27982157ffa382ca860ad0d3992552cf2dd33020e5bce7d589ab4fc9339202ef885632088c79672e8e54f6601c8cf11a92b2673bb54ebc71050308034f48898fe0936e4a46b8fa444f762d11865c759a834f35365fbd633e646d0494f496b9ad18fee5631246c306e62116ca977c576c78db4b167ee4fb28728811dfedddcb5a68b9ffc388b0ae730975cfb63d2809877aa22b414d869c7d8c8f528aa61b980990ca7a54f6a27dec5633c0dbdef9b653af4a86609bae60f45040de350f3bfa94619e175e9c400b5485ca3c83fbc488e0f5f399528156e8b7b968b6d9189eb8ef9ff4ba4cee504c716468f27977c86addbd00b1e6f82119f75ae7464424da5d12d4390b0cea122decb4f6352d65b15f95c15bcfe4558da7c9619741aae66447fe177dde69a8cc27b5e4c37feeb8df82a6ee63ecb3a7cd401bc6a6a10bc7b6f4080dc5606a93af17436ccaa3720a58d9af6a3c5167b280ab70d5c5d02df00ee8dcaf5f95c822f4815d2ca18bcc92d7010c74e3966d6bd8924002c5ba4154167799b378ada21c2f1de3526b63b53662a71bb8217f26ee7ae2d57a0ba83b22f6a30d6b861a4a9acc168943a8e3931d31d28f69bbc130768e5660606f3fdc800ce55373d5435e21246c9e37638add82967bb6142e2d0c7741e59d0bf3bb244882b36f59700361b4de632b3bb02f552afaa4a3b7c532ea87633ee8927598cb1a6429921b19ece95edfc64ea4b1ff9d5072c3ee3acf7ac01e912de2ea95eeeffc6ee18d47ee988beada2e083c8a11f6a83f26c3d147c44ef161ccbca9294282591eddd82fc960f23bd7e8454b9ba186a8d48b7cf65a700df53e5cf4e719f93d75e4e2f1478b94511b455b218bb699795342de16bfdf707b851ada1af87c6acf5e95b68952a6fc22d6c3071094f935d6ce45210a5c2aa452e0d89012e66a6ea2fdcff297af266bc5dfd8bf325b972d3e979891364ca0cc79f80e0a7ae6583dd839d6eeeb8e5f2ee38749953c818729d758d7795e3ebefbc2432c5cef16593368bb5df0d47003e1b5bd25c4ef02cba9f84c421a2e0184b150e8514bffaa8e4ad560c304357e321a299d055f952c635177b4d0b7c8dca17a7887bfd4169f72e6fec94b17258c521e171019e5a3bd2719eaa4754fd770d13119e2d381e770f3533a95611eb6b89b84b29f4dd32115aba2ba5ab3ec9ae8e1a0691355df333c91efc650f5e75fb601676a10231b01eb2c375eeed57ab44d077fe9deb30eccc8cd518fedab40e5848e392947acc0beee786b239ed14ca4ed3f5a93e026eeddc746050d9db25d3ecfbc854802081c0ced99dc790bc76f6cc4009e2e468b5994f83bc52d4d80753085e278ff6e896b271c6214c0bf3ad353df24bc9acc198998024bc88dfdc0612cc6dc6107e1510faf4a7a0e79db5269a8f5ff3ad0209ffb3eeabb06ccfeff5f85b42bcf5c2cfeda8fa89e21681733526df14f7280a7e365bff45c4fd1749a242b9e1fffabace45e1b8a2a50799544f12b53b95e9568f5b6f197785b626d57e499478432e5e8460ecda7a0488e253a04d67beb761c15de2675a6be66cd2e745607a4d5cb0f48e9a473e52c2f404924e4221f20d175fb3e160597da0c23bdc052c292d5835ac3fccb4b46dac409bf146f223d58dd3a8b045979e820fab4326cb96c6e5e31867bc87c3a7968ccadd2193f43894fca8a765f0d0316d6c7525dfec8b6f86851a973a1ace54b91b528701b972500065dfe0a389453938721636665c425facb47836dc33a1e91481286d31edabd577b3f41e08163e619b92d0c39ddea18df51b51ab8dfc256d607e9ae658025ac267095b76a2779b0d7d6765b3f062ee0bd1022f9ca4d1fe7472e3398a8ede862ea99e232c7f9c36464cd930bc79619713f456f0bbb3dd4c9cd316097b48775e61e08e52b372445a94be275b951297f831896150321656342d8f8261badd63d32b92f5e42bf1cf033f6dc2af88b605a70742d47e19fe0e1c32cb1b4a0990da7c3a3d3ff663e55d43c3eaa05696addcb27bdc20b6c785e357f158aeb45782ef7a25e1eb744ec4b0ba8cc593f2da3c968e554e0a9dabd8160e83f5e35b627c8a315be6842206c726e65a29d1192c3b1012bb3492f959adae782dbfeaac044a31ab165556f27aa4ca0f1549645b049204d9a69dcb3314a0c8e417fe62238c3a94abe196d800b960264ca82ab25272edab0bb8e9f7ff440c54e8622fca72596025a0e0579baff1343d512330fac21690a1abf3f4b91c393c7a90dee63376e5e313f0f607a158fabb67cbf84d40e5f97040d2a11ed65022a11b3ee477d4a9cecb39760c28b26ccf6872557af18d9aaa5d201db52a8dafb270d288a6e4745c03d8c9bae29c2c2b0d756e2794b781422087da6ff57d6c9d7bc3d137bec87383aa37fb4471333de213aaec3ec2d7c5809b9ce36ac78191df02e80bee0c4fb99884297eb78162666a518c39708c23b71f3768a9b45fb41c3062d27cdb5407696d0a732d33e748083baa9e444cfa3c6b2ed3d0e1f890f96dbdaf016871a5a214427c98873d6da34673990470fa528473870279c5033167b06f3ad42e7a06c37c3a542b60fc0c1ec8d7a3cd528e20d54501d9b5a2854c94cfd18b24d62765a45867f4033c7622a7e8d8244f7bdb2b71b6f714c384a1e611594de6f7e0d42c77e7263efbcb023aaa7a4cf3993d29bb4bdd879931b944480f574f10a067e6c75e2b172989e34ec6534eb92f4fa718d47f1431d5646fddae388de7dfebc10afbaac1fc8a97e63b4f83d02010bf1e66f6e5230895412f2cced2846ff869de19ce45397f5eff6f0efcbd66bdd0d2ec4a5ccffe424e89d085fa56e080685fa96b3ba76ec1af12e4e3f19eaa8016c01640c5f45d001be725a90f08ffd0c08df636a5a9f0c2b1c24a06d97b6ebc815fbcf4373894ee7f1227dd8c7841f14cb013f3ef35dfd6048daa20eab689b73761bb89a4d8dda975643d1c319f17228452457f4d0b814a4c0a61b9daa2874a765633ec70caff5dfaf9dde314eedbfd78ed3493da8e944331a86f6637be1113ad0c4489ffdfca5914e90784ec31aabe5947829f5886bd36e8bfd19a9be3be4884", 0x1000, 0x3, 0x0, 0x3}]) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x620}) syz_open_dev$usbmon(&(0x7f0000001140), 0x4, 0x0) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x80000000000000) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2300000000000000) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x101, 0x301000) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xfdffffffffff0700) 23:38:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 1) 23:38:31 executing program 2: mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (fail_nth: 1) 23:38:31 executing program 4: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x7}) (async) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) io_submit(0x0, 0x1, &(0x7f0000001100)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f00000000c0)="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", 0x1000, 0x3, 0x0, 0x3}]) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x620}) syz_open_dev$usbmon(&(0x7f0000001140), 0x4, 0x0) 23:38:31 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x101, 0x301000) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xffffffff00000000) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xe0ff2000000000) [ 3204.331887][ T5236] FAULT_INJECTION: forcing a failure. [ 3204.331887][ T5236] name failslab, interval 1, probability 0, space 0, times 0 [ 3204.340549][ T5239] FAULT_INJECTION: forcing a failure. [ 3204.340549][ T5239] name failslab, interval 1, probability 0, space 0, times 0 [ 3204.362907][ T5239] CPU: 0 PID: 5239 Comm: syz-executor.1 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3204.372842][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3204.372863][ T5239] Call Trace: [ 3204.372870][ T5239] [ 3204.372879][ T5239] dump_stack_lvl+0x151/0x1b7 [ 3204.372913][ T5239] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3204.372944][ T5239] dump_stack+0x15/0x18 [ 3204.372975][ T5239] should_fail_ex+0x3d0/0x520 [ 3204.373000][ T5239] ? vm_area_dup+0x27/0x290 [ 3204.373026][ T5239] __should_failslab+0xaf/0xf0 [ 3204.373058][ T5239] should_failslab+0x9/0x20 [ 3204.373081][ T5239] kmem_cache_alloc+0x3b/0x2c0 [ 3204.373113][ T5239] vm_area_dup+0x27/0x290 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x100000000000000) 23:38:31 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x1, 0x80, 0x8, 0x7ff, {{0xf, 0x4, 0x3, 0x2f, 0x3c, 0x67, 0x0, 0xed, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x24, 0xde, 0x3, 0x4, [{@local, 0x8000}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xffffff80}, {@local, 0x7fffffff}]}, @noop]}}}}}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x50a, 0x0, 0xffffffffffffffff, 0x5, '\x00', r0, r1, 0x5, 0x5, 0x5}, 0x48) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r2, 0x0) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xffffffffff600000) 23:38:31 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x1, 0x80, 0x8, 0x7ff, {{0xf, 0x4, 0x3, 0x2f, 0x3c, 0x67, 0x0, 0xed, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x24, 0xde, 0x3, 0x4, [{@local, 0x8000}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xffffff80}, {@local, 0x7fffffff}]}, @noop]}}}}}) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x50a, 0x0, 0xffffffffffffffff, 0x5, '\x00', r0, r1, 0x5, 0x5, 0x5}, 0x48) (async, rerun: 64) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (rerun: 64) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r2, 0x0) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x200000000000000) 23:38:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000080)=[0xd320, 0x7f, 0xfffffff9, 0xe4c, 0x3f, 0x8, 0x3ff, 0x1]) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 23:38:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 2) 23:38:31 executing program 5: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x1, 0x80, 0x8, 0x7ff, {{0xf, 0x4, 0x3, 0x2f, 0x3c, 0x67, 0x0, 0xed, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0x24, 0xde, 0x3, 0x4, [{@local, 0x8000}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x42}, 0xffffff80}, {@local, 0x7fffffff}]}, @noop]}}}}}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x50a, 0x0, 0xffffffffffffffff, 0x5, '\x00', r0, r1, 0x5, 0x5, 0x5}, 0x48) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r2, 0x0) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r2, 0x0) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x400000000000000) 23:38:31 executing program 4: ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x7}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) io_submit(0x0, 0x1, &(0x7f0000001100)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f00000000c0)="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", 0x1000, 0x3, 0x0, 0x3}]) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x620}) syz_open_dev$usbmon(&(0x7f0000001140), 0x4, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x7}) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) (async) io_submit(0x0, 0x1, &(0x7f0000001100)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f00000000c0)="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", 0x1000, 0x3, 0x0, 0x3}]) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x620}) (async) syz_open_dev$usbmon(&(0x7f0000001140), 0x4, 0x0) (async) 23:38:31 executing program 2: mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (fail_nth: 2) [ 3204.373136][ T5239] ? __split_vma+0x19a/0x880 [ 3204.373166][ T5239] __split_vma+0x1ba/0x880 [ 3204.438435][ T5239] do_mas_align_munmap+0x3bf/0x1400 [ 3204.443465][ T5239] ? kernel_text_address+0xa9/0xe0 [ 3204.448408][ T5239] ? __kernel_text_address+0xd/0x40 [ 3204.453449][ T5239] ? avc_has_perm_noaudit+0x348/0x430 [ 3204.453487][ T5239] ? do_mas_munmap+0x2b0/0x2b0 [ 3204.453520][ T5239] ? mas_find+0x4e4/0x520 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x800000000000000) 23:38:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 3) 23:38:31 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="5717075578630588e144c3ee4b6951c48fd50d5c6b77fd0f9315a08e5da6bfdf2b1500eb9c37297def8175d5a2808dc18c66ca1d37af432b45d890eeacc60afc4d425027622692ec78e6f5764a09d9da04a10b7809b155ee0046c2530b95ef3201317d0b3bd91470d1a96d740d2df32d69d3baf3fec81b6a44fb3d445274c36deaaac9e6439b74c8bf220cd683c7a9d1c514bc3b5f9561a05a2cf1715b086c2bb896664656e56adc9099a7086de8a2731a246f020760d8d31b04c11ce8f80618655972b8422f0de3dfef33bc97b648b794632e7235a198d8eddae4aba6e807d723ecf5f7d9465b01c001f9ea707f", 0xee}, 0x68) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team_slave_0\x00', 0x7}) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:31 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xa00000000000000) 23:38:31 executing program 2: mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (fail_nth: 3) 23:38:31 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (fail_nth: 4) [ 3204.453548][ T5239] do_mas_munmap+0x23e/0x2b0 [ 3204.453577][ T5239] mmap_region+0x75c/0x2390 [ 3204.453608][ T5239] ? file_mmap_ok+0x150/0x150 [ 3204.453634][ T5239] ? cap_mmap_addr+0x169/0x2e0 [ 3204.453652][ T5239] ? __kasan_check_read+0x11/0x20 [ 3204.453677][ T5239] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3204.453706][ T5239] ? arch_get_unmapped_area+0x780/0x780 [ 3204.453735][ T5239] ? file_mmap_ok+0x104/0x150 [ 3204.453759][ T5239] do_mmap+0x853/0xe30 [ 3204.453785][ T5239] ? mlock_future_check+0x110/0x110 [ 3204.453812][ T5239] vm_mmap_pgoff+0x208/0x430 [ 3204.453834][ T5239] ? account_locked_vm+0x250/0x250 [ 3204.453855][ T5239] ? __fget_files+0x2cb/0x330 [ 3204.453879][ T5239] ksys_mmap_pgoff+0x15d/0x1e0 [ 3204.453905][ T5239] __x64_sys_mmap+0x103/0x120 [ 3204.453930][ T5239] do_syscall_64+0x3d/0xb0 [ 3204.453952][ T5239] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3204.453980][ T5239] RIP: 0033:0x7fb0d627cae9 [ 3204.453997][ T5239] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3204.454014][ T5239] RSP: 002b:00007fb0d70ba0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3204.454034][ T5239] RAX: ffffffffffffffda RBX: 00007fb0d639bf80 RCX: 00007fb0d627cae9 [ 3204.454049][ T5239] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3204.454062][ T5239] RBP: 00007fb0d70ba120 R08: 0000000000000003 R09: 0000000000000000 [ 3204.454074][ T5239] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3204.454086][ T5239] R13: 000000000000000b R14: 00007fb0d639bf80 R15: 00007ffd6eea5948 [ 3204.454104][ T5239] [ 3204.454113][ T5236] CPU: 1 PID: 5236 Comm: syz-executor.2 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3204.454137][ T5236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3204.454150][ T5236] Call Trace: [ 3204.454156][ T5236] [ 3204.454164][ T5236] dump_stack_lvl+0x151/0x1b7 [ 3204.454192][ T5236] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3204.454220][ T5236] dump_stack+0x15/0x18 [ 3204.454243][ T5236] should_fail_ex+0x3d0/0x520 [ 3204.454267][ T5236] ? vm_area_dup+0x27/0x290 [ 3204.454291][ T5236] __should_failslab+0xaf/0xf0 [ 3204.454322][ T5236] should_failslab+0x9/0x20 [ 3204.454342][ T5236] kmem_cache_alloc+0x3b/0x2c0 [ 3204.454371][ T5236] vm_area_dup+0x27/0x290 [ 3204.454393][ T5236] ? __split_vma+0x19a/0x880 [ 3204.454422][ T5236] __split_vma+0x1ba/0x880 [ 3204.454450][ T5236] ? __kasan_check_write+0x14/0x20 [ 3204.454487][ T5236] ? __set_page_owner_handle+0x38a/0x3d0 [ 3204.454517][ T5236] do_mas_align_munmap+0x3bf/0x1400 [ 3204.454549][ T5236] ? prep_new_page+0x1b/0x110 [ 3204.454581][ T5236] ? do_mas_munmap+0x2b0/0x2b0 [ 3204.454612][ T5236] ? mas_find+0x4e4/0x520 [ 3204.454637][ T5236] do_mas_munmap+0x23e/0x2b0 [ 3204.454668][ T5236] mmap_region+0x75c/0x2390 [ 3204.454700][ T5236] ? file_mmap_ok+0x150/0x150 [ 3204.454728][ T5236] ? __alloc_pages+0x3a1/0x780 [ 3204.454758][ T5236] ? cap_mmap_addr+0x169/0x2e0 [ 3204.454784][ T5236] ? get_unmapped_area+0x31d/0x380 [ 3204.454814][ T5236] do_mmap+0x853/0xe30 [ 3204.454843][ T5236] ? mlock_future_check+0x110/0x110 [ 3204.454871][ T5236] vm_mmap_pgoff+0x208/0x430 [ 3204.454895][ T5236] ? account_locked_vm+0x250/0x250 [ 3204.454917][ T5236] ? ksys_write+0x260/0x2c0 [ 3204.454942][ T5236] ksys_mmap_pgoff+0xed/0x1e0 [ 3204.454969][ T5236] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3204.454995][ T5236] __x64_sys_mmap+0x103/0x120 [ 3204.455024][ T5236] do_syscall_64+0x3d/0xb0 [ 3204.455049][ T5236] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3204.455074][ T5236] RIP: 0033:0x7f386f67cae9 [ 3204.455093][ T5236] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3204.455114][ T5236] RSP: 002b:00007f38703e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3204.455137][ T5236] RAX: ffffffffffffffda RBX: 00007f386f79bf80 RCX: 00007f386f67cae9 [ 3204.455156][ T5236] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3204.455172][ T5236] RBP: 00007f38703e2120 R08: ffffffffffffffff R09: 0000000000000000 [ 3204.455188][ T5236] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 3204.455202][ T5236] R13: 000000000000000b R14: 00007f386f79bf80 R15: 00007ffeb75a6308 [ 3204.455222][ T5236] [ 3204.483530][ T5269] FAULT_INJECTION: forcing a failure. [ 3204.483530][ T5269] name failslab, interval 1, probability 0, space 0, times 0 [ 3204.483564][ T5269] CPU: 0 PID: 5269 Comm: syz-executor.1 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3204.483591][ T5269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3204.483605][ T5269] Call Trace: [ 3204.483612][ T5269] [ 3204.483620][ T5269] dump_stack_lvl+0x151/0x1b7 [ 3204.483654][ T5269] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3204.483685][ T5269] dump_stack+0x15/0x18 [ 3204.483710][ T5269] should_fail_ex+0x3d0/0x520 [ 3204.483735][ T5269] ? vm_area_dup+0x65/0x290 [ 3204.483761][ T5269] __should_failslab+0xaf/0xf0 [ 3204.483793][ T5269] should_failslab+0x9/0x20 [ 3204.483816][ T5269] kmem_cache_alloc+0x3b/0x2c0 [ 3204.483849][ T5269] vm_area_dup+0x65/0x290 [ 3204.483874][ T5269] __split_vma+0x1ba/0x880 [ 3204.483907][ T5269] do_mas_align_munmap+0x3bf/0x1400 [ 3204.483937][ T5269] ? kernel_text_address+0xa9/0xe0 [ 3204.483982][ T5269] ? __kernel_text_address+0xd/0x40 [ 3204.484022][ T5269] ? avc_has_perm_noaudit+0x348/0x430 [ 3204.484046][ T5269] ? do_mas_munmap+0x2b0/0x2b0 [ 3204.484081][ T5269] ? mas_find+0x4e4/0x520 [ 3204.484111][ T5269] do_mas_munmap+0x23e/0x2b0 [ 3204.484142][ T5269] mmap_region+0x75c/0x2390 [ 3204.484178][ T5269] ? file_mmap_ok+0x150/0x150 [ 3204.484207][ T5269] ? cap_mmap_addr+0x169/0x2e0 [ 3204.484228][ T5269] ? __kasan_check_read+0x11/0x20 [ 3204.484256][ T5269] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3204.484290][ T5269] ? arch_get_unmapped_area+0x780/0x780 [ 3204.484322][ T5269] ? file_mmap_ok+0x104/0x150 [ 3204.484350][ T5269] do_mmap+0x853/0xe30 [ 3204.484379][ T5269] ? mlock_future_check+0x110/0x110 [ 3204.484411][ T5269] vm_mmap_pgoff+0x208/0x430 [ 3204.484437][ T5269] ? account_locked_vm+0x250/0x250 [ 3204.484461][ T5269] ? __fget_files+0x2cb/0x330 [ 3204.484488][ T5269] ksys_mmap_pgoff+0x15d/0x1e0 [ 3204.484517][ T5269] __x64_sys_mmap+0x103/0x120 [ 3204.484545][ T5269] do_syscall_64+0x3d/0xb0 [ 3204.484570][ T5269] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3204.484594][ T5269] RIP: 0033:0x7fb0d627cae9 [ 3204.484612][ T5269] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3204.484632][ T5269] RSP: 002b:00007fb0d70ba0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3204.484658][ T5269] RAX: ffffffffffffffda RBX: 00007fb0d639bf80 RCX: 00007fb0d627cae9 [ 3204.484676][ T5269] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3204.484690][ T5269] RBP: 00007fb0d70ba120 R08: 0000000000000003 R09: 0000000000000000 [ 3204.484705][ T5269] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3204.484719][ T5269] R13: 000000000000000b R14: 00007fb0d639bf80 R15: 00007ffd6eea5948 [ 3204.484739][ T5269] [ 3204.505898][ T5278] FAULT_INJECTION: forcing a failure. [ 3204.505898][ T5278] name failslab, interval 1, probability 0, space 0, times 0 [ 3204.505930][ T5278] CPU: 1 PID: 5278 Comm: syz-executor.2 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3204.505955][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3204.505969][ T5278] Call Trace: [ 3204.505977][ T5278] [ 3204.505985][ T5278] dump_stack_lvl+0x151/0x1b7 [ 3204.506017][ T5278] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3204.506048][ T5278] dump_stack+0x15/0x18 [ 3204.506072][ T5278] should_fail_ex+0x3d0/0x520 [ 3204.506097][ T5278] ? vm_area_dup+0x65/0x290 [ 3204.506123][ T5278] __should_failslab+0xaf/0xf0 [ 3204.506157][ T5278] should_failslab+0x9/0x20 [ 3204.506181][ T5278] kmem_cache_alloc+0x3b/0x2c0 [ 3204.506213][ T5278] vm_area_dup+0x65/0x290 [ 3204.506237][ T5278] __split_vma+0x1ba/0x880 [ 3204.506266][ T5278] ? __kasan_check_write+0x14/0x20 [ 3204.506299][ T5278] ? __set_page_owner_handle+0x38a/0x3d0 [ 3204.506328][ T5278] do_mas_align_munmap+0x3bf/0x1400 [ 3204.506361][ T5278] ? prep_new_page+0x1b/0x110 [ 3204.506393][ T5278] ? do_mas_munmap+0x2b0/0x2b0 [ 3204.506427][ T5278] ? mas_find+0x4e4/0x520 [ 3204.506463][ T5278] do_mas_munmap+0x23e/0x2b0 [ 3204.506496][ T5278] mmap_region+0x75c/0x2390 [ 3204.506530][ T5278] ? file_mmap_ok+0x150/0x150 [ 3204.506559][ T5278] ? __alloc_pages+0x3a1/0x780 [ 3204.506591][ T5278] ? cap_mmap_addr+0x169/0x2e0 [ 3204.506617][ T5278] ? get_unmapped_area+0x31d/0x380 [ 3204.506648][ T5278] do_mmap+0x853/0xe30 [ 3204.506678][ T5278] ? mlock_future_check+0x110/0x110 [ 3204.506710][ T5278] vm_mmap_pgoff+0x208/0x430 [ 3204.506736][ T5278] ? account_locked_vm+0x250/0x250 [ 3204.506760][ T5278] ? ksys_write+0x260/0x2c0 [ 3204.506787][ T5278] ksys_mmap_pgoff+0xed/0x1e0 [ 3204.506815][ T5278] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3204.506842][ T5278] __x64_sys_mmap+0x103/0x120 [ 3204.506872][ T5278] do_syscall_64+0x3d/0xb0 [ 3204.506896][ T5278] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3204.506921][ T5278] RIP: 0033:0x7f386f67cae9 [ 3204.506939][ T5278] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3204.506961][ T5278] RSP: 002b:00007f38703e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3204.506985][ T5278] RAX: ffffffffffffffda RBX: 00007f386f79bf80 RCX: 00007f386f67cae9 [ 3204.507001][ T5278] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3204.507017][ T5278] RBP: 00007f38703e2120 R08: ffffffffffffffff R09: 0000000000000000 [ 3204.507033][ T5278] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 23:38:32 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) (async, rerun: 64) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000080)=[0xd320, 0x7f, 0xfffffff9, 0xe4c, 0x3f, 0x8, 0x3ff, 0x1]) (async, rerun: 64) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 23:38:32 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="5717075578630588e144c3ee4b6951c48fd50d5c6b77fd0f9315a08e5da6bfdf2b1500eb9c37297def8175d5a2808dc18c66ca1d37af432b45d890eeacc60afc4d425027622692ec78e6f5764a09d9da04a10b7809b155ee0046c2530b95ef3201317d0b3bd91470d1a96d740d2df32d69d3baf3fec81b6a44fb3d445274c36deaaac9e6439b74c8bf220cd683c7a9d1c514bc3b5f9561a05a2cf1715b086c2bb896664656e56adc9099a7086de8a2731a246f020760d8d31b04c11ce8f80618655972b8422f0de3dfef33bc97b648b794632e7235a198d8eddae4aba6e807d723ecf5f7d9465b01c001f9ea707f", 0xee}, 0x68) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team_slave_0\x00', 0x7}) (async, rerun: 32) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (rerun: 32) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 23:38:32 executing program 2: mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (fail_nth: 4) 23:38:32 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xd00000000000000) [ 3204.507047][ T5278] R13: 000000000000000b R14: 00007f386f79bf80 R15: 00007ffeb75a6308 [ 3204.507067][ T5278] [ 3204.539155][ T5287] FAULT_INJECTION: forcing a failure. [ 3204.539155][ T5287] name failslab, interval 1, probability 0, space 0, times 0 [ 3204.544349][ T5285] FAULT_INJECTION: forcing a failure. [ 3204.544349][ T5285] name failslab, interval 1, probability 0, space 0, times 0 [ 3204.558848][ T5287] CPU: 1 PID: 5287 Comm: syz-executor.2 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3205.479879][ T5287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3205.479898][ T5287] Call Trace: [ 3205.479906][ T5287] [ 3205.479914][ T5287] dump_stack_lvl+0x151/0x1b7 [ 3205.479945][ T5287] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3205.479969][ T5287] ? __kernel_text_address+0xd/0x40 [ 3205.480001][ T5287] dump_stack+0x15/0x18 [ 3205.480020][ T5287] should_fail_ex+0x3d0/0x520 [ 3205.480040][ T5287] ? mas_alloc_nodes+0x267/0x7d0 [ 3205.480063][ T5287] __should_failslab+0xaf/0xf0 [ 3205.480090][ T5287] should_failslab+0x9/0x20 [ 3205.480109][ T5287] kmem_cache_alloc+0x3b/0x2c0 [ 3205.480135][ T5287] mas_alloc_nodes+0x267/0x7d0 [ 3205.480160][ T5287] mas_preallocate+0xef2/0x1bd0 [ 3205.480185][ T5287] ? mas_destroy+0x3280/0x3280 [ 3205.480206][ T5287] ? rwsem_write_trylock+0x15b/0x290 [ 3205.480231][ T5287] __vma_adjust+0x6aa/0x1fe0 [ 3205.480258][ T5287] ? vma_start_write+0x160/0x160 [ 3205.480280][ T5287] ? rwsem_write_trylock+0x15b/0x290 [ 3205.480305][ T5287] __split_vma+0x619/0x880 [ 3205.480332][ T5287] do_mas_align_munmap+0x3bf/0x1400 [ 3205.480359][ T5287] ? prep_new_page+0x1b/0x110 [ 3205.480386][ T5287] ? do_mas_munmap+0x2b0/0x2b0 [ 3205.480413][ T5287] ? mas_find+0x4e4/0x520 [ 3205.480435][ T5287] do_mas_munmap+0x23e/0x2b0 [ 3205.480460][ T5287] mmap_region+0x75c/0x2390 [ 3205.480488][ T5287] ? file_mmap_ok+0x150/0x150 [ 3205.480510][ T5287] ? __alloc_pages+0x3a1/0x780 [ 3205.480534][ T5287] ? cap_mmap_addr+0x169/0x2e0 [ 3205.480554][ T5287] ? get_unmapped_area+0x31d/0x380 [ 3205.480579][ T5287] do_mmap+0x853/0xe30 [ 3205.480602][ T5287] ? mlock_future_check+0x110/0x110 [ 3205.480628][ T5287] vm_mmap_pgoff+0x208/0x430 [ 3205.480649][ T5287] ? account_locked_vm+0x250/0x250 [ 3205.480668][ T5287] ? ksys_write+0x260/0x2c0 [ 3205.480690][ T5287] ksys_mmap_pgoff+0xed/0x1e0 [ 3205.480712][ T5287] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3205.480735][ T5287] __x64_sys_mmap+0x103/0x120 [ 3205.480758][ T5287] do_syscall_64+0x3d/0xb0 [ 3205.480778][ T5287] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3205.480798][ T5287] RIP: 0033:0x7f386f67cae9 [ 3205.480814][ T5287] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3205.480835][ T5287] RSP: 002b:00007f38703e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3205.480860][ T5287] RAX: ffffffffffffffda RBX: 00007f386f79bf80 RCX: 00007f386f67cae9 [ 3205.480874][ T5287] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3205.480886][ T5287] RBP: 00007f38703e2120 R08: ffffffffffffffff R09: 0000000000000000 [ 3205.480899][ T5287] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 3205.480911][ T5287] R13: 000000000000000b R14: 00007f386f79bf80 R15: 00007ffeb75a6308 [ 3205.480928][ T5287] [ 3205.493137][ T5285] CPU: 1 PID: 5285 Comm: syz-executor.1 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3205.493173][ T5285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3205.493187][ T5285] Call Trace: [ 3205.493194][ T5285] [ 3205.493202][ T5285] dump_stack_lvl+0x151/0x1b7 [ 3205.493237][ T5285] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3205.493264][ T5285] ? __kernel_text_address+0xd/0x40 [ 3205.493300][ T5285] ? arch_stack_walk+0xf3/0x140 [ 3205.493329][ T5285] dump_stack+0x15/0x18 [ 3205.493351][ T5285] should_fail_ex+0x3d0/0x520 [ 3205.493373][ T5285] ? mas_alloc_nodes+0x267/0x7d0 [ 3205.493400][ T5285] __should_failslab+0xaf/0xf0 [ 3205.493430][ T5285] should_failslab+0x9/0x20 [ 3205.493454][ T5285] kmem_cache_alloc+0x3b/0x2c0 [ 3205.493487][ T5285] mas_alloc_nodes+0x267/0x7d0 [ 3205.493517][ T5285] mas_preallocate+0xef2/0x1bd0 [ 3205.493545][ T5285] ? mas_destroy+0x3280/0x3280 [ 3205.493569][ T5285] ? rwsem_write_trylock+0x15b/0x290 [ 3205.493600][ T5285] __vma_adjust+0x6aa/0x1fe0 [ 3205.493631][ T5285] ? vma_start_write+0x160/0x160 [ 3205.493657][ T5285] ? rwsem_write_trylock+0x15b/0x290 [ 3205.493686][ T5285] __split_vma+0x619/0x880 [ 3205.493716][ T5285] do_mas_align_munmap+0x3bf/0x1400 [ 3205.493745][ T5285] ? kernel_text_address+0xa9/0xe0 [ 3205.493775][ T5285] ? __kernel_text_address+0xd/0x40 [ 3205.493806][ T5285] ? avc_has_perm_noaudit+0x348/0x430 [ 3205.493842][ T5285] ? do_mas_munmap+0x2b0/0x2b0 [ 3205.493874][ T5285] ? mas_find+0x4e4/0x520 [ 3205.493900][ T5285] do_mas_munmap+0x23e/0x2b0 [ 3205.493930][ T5285] mmap_region+0x75c/0x2390 [ 3205.493962][ T5285] ? file_mmap_ok+0x150/0x150 [ 3205.493988][ T5285] ? cap_mmap_addr+0x169/0x2e0 [ 3205.494009][ T5285] ? __kasan_check_read+0x11/0x20 [ 3205.494036][ T5285] ? shmem_get_unmapped_area+0x2e3/0x710 [ 3205.494068][ T5285] ? arch_get_unmapped_area+0x780/0x780 [ 3205.494102][ T5285] ? file_mmap_ok+0x104/0x150 [ 3205.494130][ T5285] do_mmap+0x853/0xe30 [ 3205.494159][ T5285] ? mlock_future_check+0x110/0x110 [ 3205.494192][ T5285] vm_mmap_pgoff+0x208/0x430 [ 3205.494216][ T5285] ? account_locked_vm+0x250/0x250 [ 3205.494240][ T5285] ? __fget_files+0x2cb/0x330 [ 3205.494267][ T5285] ksys_mmap_pgoff+0x15d/0x1e0 [ 3205.494296][ T5285] __x64_sys_mmap+0x103/0x120 [ 3205.494325][ T5285] do_syscall_64+0x3d/0xb0 [ 3205.494349][ T5285] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3205.494374][ T5285] RIP: 0033:0x7fb0d627cae9 [ 3205.494394][ T5285] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3205.494414][ T5285] RSP: 002b:00007fb0d70ba0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3205.494439][ T5285] RAX: ffffffffffffffda RBX: 00007fb0d639bf80 RCX: 00007fb0d627cae9 [ 3205.494456][ T5285] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3205.494471][ T5285] RBP: 00007fb0d70ba120 R08: 0000000000000003 R09: 0000000000000000 [ 3205.494486][ T5285] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 3205.494500][ T5285] R13: 000000000000000b R14: 00007fb0d639bf80 R15: 00007ffd6eea5948 [ 3205.494520][ T5285] [ 3205.514957][ T5304] FAULT_INJECTION: forcing a failure. [ 3205.514957][ T5304] name failslab, interval 1, probability 0, space 0, times 0 [ 3205.514990][ T5304] CPU: 1 PID: 5304 Comm: syz-executor.2 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3205.515013][ T5304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3205.515028][ T5304] Call Trace: [ 3205.515036][ T5304] [ 3205.515043][ T5304] dump_stack_lvl+0x151/0x1b7 [ 3205.515075][ T5304] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3205.515103][ T5304] dump_stack+0x15/0x18 [ 3205.515124][ T5304] should_fail_ex+0x3d0/0x520 [ 3205.515149][ T5304] __should_failslab+0xaf/0xf0 [ 3205.515180][ T5304] should_failslab+0x9/0x20 [ 3205.515202][ T5304] kmem_cache_alloc_bulk+0x2e/0x3d0 [ 3205.515235][ T5304] mas_alloc_nodes+0x3ce/0x7d0 [ 3205.515264][ T5304] mas_preallocate+0xef2/0x1bd0 [ 3205.515294][ T5304] ? mas_destroy+0x3280/0x3280 [ 3205.515320][ T5304] ? rwsem_write_trylock+0x15b/0x290 [ 3205.515351][ T5304] __vma_adjust+0x6aa/0x1fe0 [ 3205.515381][ T5304] ? vm_area_dup+0x27/0x290 [ 3205.515408][ T5304] ? vma_start_write+0x160/0x160 [ 3205.515436][ T5304] ? rwsem_write_trylock+0x15b/0x290 [ 3205.515466][ T5304] __split_vma+0x619/0x880 [ 3205.515505][ T5304] do_mas_align_munmap+0x3bf/0x1400 [ 3205.515539][ T5304] ? prep_new_page+0x1b/0x110 [ 3205.515572][ T5304] ? do_mas_munmap+0x2b0/0x2b0 [ 3205.515607][ T5304] ? mas_find+0x4e4/0x520 [ 3205.515634][ T5304] do_mas_munmap+0x23e/0x2b0 [ 3205.515664][ T5304] mmap_region+0x75c/0x2390 [ 3205.515699][ T5304] ? file_mmap_ok+0x150/0x150 [ 3205.515725][ T5304] ? __alloc_pages+0x3a1/0x780 [ 3205.515755][ T5304] ? cap_mmap_addr+0x169/0x2e0 [ 3205.515782][ T5304] ? get_unmapped_area+0x31d/0x380 [ 3205.515812][ T5304] do_mmap+0x853/0xe30 [ 3205.515851][ T5304] ? mlock_future_check+0x110/0x110 [ 3205.515886][ T5304] vm_mmap_pgoff+0x208/0x430 [ 3205.515913][ T5304] ? account_locked_vm+0x250/0x250 [ 3205.515940][ T5304] ? ksys_write+0x260/0x2c0 [ 3205.515966][ T5304] ksys_mmap_pgoff+0xed/0x1e0 [ 3205.515995][ T5304] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3205.516023][ T5304] __x64_sys_mmap+0x103/0x120 [ 3205.516054][ T5304] do_syscall_64+0x3d/0xb0 [ 3205.516080][ T5304] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3205.516105][ T5304] RIP: 0033:0x7f386f67cae9 [ 3205.516125][ T5304] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3205.516145][ T5304] RSP: 002b:00007f38703e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3205.516171][ T5304] RAX: ffffffffffffffda RBX: 00007f386f79bf80 RCX: 00007f386f67cae9 23:38:33 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:38:33 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000080)=[0xd320, 0x7f, 0xfffffff9, 0xe4c, 0x3f, 0x8, 0x3ff, 0x1]) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) (async) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) (async) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000080)=[0xd320, 0x7f, 0xfffffff9, 0xe4c, 0x3f, 0x8, 0x3ff, 0x1]) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) (async) 23:38:33 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xe00000000000000) 23:38:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 23:38:33 executing program 2: mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (fail_nth: 5) 23:38:33 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)="5717075578630588e144c3ee4b6951c48fd50d5c6b77fd0f9315a08e5da6bfdf2b1500eb9c37297def8175d5a2808dc18c66ca1d37af432b45d890eeacc60afc4d425027622692ec78e6f5764a09d9da04a10b7809b155ee0046c2530b95ef3201317d0b3bd91470d1a96d740d2df32d69d3baf3fec81b6a44fb3d445274c36deaaac9e6439b74c8bf220cd683c7a9d1c514bc3b5f9561a05a2cf1715b086c2bb896664656e56adc9099a7086de8a2731a246f020760d8d31b04c11ce8f80618655972b8422f0de3dfef33bc97b648b794632e7235a198d8eddae4aba6e807d723ecf5f7d9465b01c001f9ea707f", 0xee}, 0x68) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'team_slave_0\x00', 0x7}) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) (async, rerun: 32) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (rerun: 32) [ 3205.516188][ T5304] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3205.516204][ T5304] RBP: 00007f38703e2120 R08: ffffffffffffffff R09: 0000000000000000 [ 3205.516220][ T5304] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 3205.516234][ T5304] R13: 000000000000000b R14: 00007f386f79bf80 R15: 00007ffeb75a6308 [ 3205.516254][ T5304] [ 3206.350745][ T5314] FAULT_INJECTION: forcing a failure. [ 3206.350745][ T5314] name failslab, interval 1, probability 0, space 0, times 0 [ 3206.364202][ T5314] CPU: 0 PID: 5314 Comm: syz-executor.2 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3206.374120][ T5314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3206.384013][ T5314] Call Trace: [ 3206.387135][ T5314] [ 3206.389921][ T5314] dump_stack_lvl+0x151/0x1b7 [ 3206.394433][ T5314] ? nf_tcp_handle_invalid+0x3f1/0x3f1 23:38:33 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:38:33 executing program 4: syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) (async) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 23:38:33 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xf00000000000000) 23:38:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x12, r0, 0x0) 23:38:33 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 23:38:33 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x1f00000000000000) [ 3206.399844][ T5314] ? __kasan_check_read+0x11/0x20 [ 3206.404713][ T5314] ? call_rcu+0xc9f/0x1230 [ 3206.404755][ T5314] dump_stack+0x15/0x18 [ 3206.404783][ T5314] should_fail_ex+0x3d0/0x520 [ 3206.404809][ T5314] ? mas_alloc_nodes+0x267/0x7d0 [ 3206.404838][ T5314] __should_failslab+0xaf/0xf0 [ 3206.404872][ T5314] should_failslab+0x9/0x20 [ 3206.404896][ T5314] kmem_cache_alloc+0x3b/0x2c0 [ 3206.404927][ T5314] mas_alloc_nodes+0x267/0x7d0 23:38:33 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x6, 0x0}, 0x8) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x100, 0x204101) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={r3}, 0x4) 23:38:33 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002dc0), 0x410001, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000000)=0x221400, 0x4) syz_open_dev$usbmon(&(0x7f0000000040), 0xffffffffffffffff, 0x533302) 23:38:33 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x600) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2004, 0x0, 0x12, r0, 0x0) 23:38:33 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0xe0000) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2000000000000000) 23:38:33 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x12, r0, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) [ 3206.404957][ T5314] mas_preallocate+0xef2/0x1bd0 [ 3206.404988][ T5314] ? mas_destroy+0x3280/0x3280 [ 3206.405017][ T5314] ? mas_prev_slot+0x88c/0x8c0 [ 3206.405045][ T5314] vma_expand+0x3c5/0xa20 [ 3206.405076][ T5314] mmap_region+0xde5/0x2390 [ 3206.405108][ T5314] ? file_mmap_ok+0x150/0x150 [ 3206.405136][ T5314] ? __alloc_pages+0x3a1/0x780 [ 3206.405166][ T5314] ? cap_mmap_addr+0x169/0x2e0 [ 3206.405191][ T5314] ? get_unmapped_area+0x31d/0x380 [ 3206.405221][ T5314] do_mmap+0x853/0xe30 [ 3206.405250][ T5314] ? mlock_future_check+0x110/0x110 [ 3206.405280][ T5314] vm_mmap_pgoff+0x208/0x430 [ 3206.405312][ T5314] ? account_locked_vm+0x250/0x250 [ 3206.405336][ T5314] ? ksys_write+0x260/0x2c0 [ 3206.405363][ T5314] ksys_mmap_pgoff+0xed/0x1e0 [ 3206.405391][ T5314] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3206.405419][ T5314] __x64_sys_mmap+0x103/0x120 [ 3206.405450][ T5314] do_syscall_64+0x3d/0xb0 [ 3206.405475][ T5314] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3206.405499][ T5314] RIP: 0033:0x7f386f67cae9 [ 3206.405518][ T5314] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3206.405539][ T5314] RSP: 002b:00007f38703e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3206.405564][ T5314] RAX: ffffffffffffffda RBX: 00007f386f79bf80 RCX: 00007f386f67cae9 [ 3206.405581][ T5314] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3206.405595][ T5314] RBP: 00007f38703e2120 R08: ffffffffffffffff R09: 0000000000000000 [ 3206.405611][ T5314] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 3206.405625][ T5314] R13: 000000000000000b R14: 00007f386f79bf80 R15: 00007ffeb75a6308 [ 3206.405644][ T5314] [ 3206.453998][ T5314] ------------[ cut here ]------------ [ 3206.621660][ T5314] kernel BUG at mm/mmap.c:2815! [ 3206.626371][ T5314] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 3206.632227][ T5314] CPU: 0 PID: 5314 Comm: syz-executor.2 Not tainted 6.1.43-syzkaller-00025-g95307ec5c864 #0 [ 3206.642119][ T5314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 3206.652014][ T5314] RIP: 0010:mmap_region+0x225e/0x2390 [ 3206.657222][ T5314] Code: 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 1e fc ff ff 48 89 df e8 03 62 09 00 e9 11 fc ff ff e8 19 d9 c2 ff 0f 0b e8 12 d9 c2 ff <0f> 0b 65 8b 05 11 f4 4f 7e 41 89 c6 4c 89 f0 48 c1 e8 06 48 8d 3c [ 3206.677097][ T5314] RSP: 0018:ffffc9000d8d7a40 EFLAGS: 00010287 [ 3206.682997][ T5314] RAX: ffffffff81b21d3e RBX: 0000000020ffffff RCX: 0000000000040000 [ 3206.690807][ T5314] RDX: ffffc90001f3b000 RSI: 000000000000bf23 RDI: 000000000000bf24 [ 3206.698620][ T5314] RBP: ffffc9000d8d7c50 R08: ffffffff81b20981 R09: ffffffff84ec5cd3 [ 3206.706431][ T5314] R10: 0000000000000003 R11: ffff88810f382880 R12: ffffc9000d8d7ba8 [ 3206.714242][ T5314] R13: dffffc0000000000 R14: 0000000020ffe000 R15: 0000000021000000 [ 3206.722054][ T5314] FS: 00007f38703e26c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 3206.730823][ T5314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3206.737240][ T5314] CR2: 0000555556abe818 CR3: 000000013c076000 CR4: 00000000003506b0 [ 3206.745064][ T5314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3206.752865][ T5314] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3206.760677][ T5314] Call Trace: [ 3206.763801][ T5314] [ 3206.766580][ T5314] ? __die_body+0x62/0xb0 [ 3206.770746][ T5314] ? die+0x88/0xb0 [ 3206.774301][ T5314] ? do_trap+0x103/0x330 [ 3206.778381][ T5314] ? mmap_region+0x225e/0x2390 [ 3206.783000][ T5314] ? handle_invalid_op+0x95/0xc0 [ 3206.787753][ T5314] ? mmap_region+0x225e/0x2390 [ 3206.792356][ T5314] ? exc_invalid_op+0x32/0x50 [ 3206.796870][ T5314] ? asm_exc_invalid_op+0x1b/0x20 [ 3206.801733][ T5314] ? mas_next_slot+0x413/0xb00 [ 3206.806328][ T5314] ? mmap_region+0xea1/0x2390 [ 3206.810843][ T5314] ? mmap_region+0x225e/0x2390 [ 3206.815443][ T5314] ? mmap_region+0x225e/0x2390 [ 3206.820049][ T5314] ? file_mmap_ok+0x150/0x150 [ 3206.824556][ T5314] ? __alloc_pages+0x3a1/0x780 [ 3206.829155][ T5314] ? cap_mmap_addr+0x169/0x2e0 [ 3206.833758][ T5314] ? get_unmapped_area+0x31d/0x380 [ 3206.838706][ T5314] do_mmap+0x853/0xe30 [ 3206.842612][ T5314] ? mlock_future_check+0x110/0x110 [ 3206.847644][ T5314] vm_mmap_pgoff+0x208/0x430 [ 3206.852071][ T5314] ? account_locked_vm+0x250/0x250 [ 3206.857017][ T5314] ? ksys_write+0x260/0x2c0 [ 3206.861359][ T5314] ksys_mmap_pgoff+0xed/0x1e0 [ 3206.865874][ T5314] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 3206.871774][ T5314] __x64_sys_mmap+0x103/0x120 [ 3206.876286][ T5314] do_syscall_64+0x3d/0xb0 [ 3206.880540][ T5314] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3206.886267][ T5314] RIP: 0033:0x7f386f67cae9 [ 3206.890605][ T5314] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 3206.910135][ T5314] RSP: 002b:00007f38703e20c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 3206.918379][ T5314] RAX: ffffffffffffffda RBX: 00007f386f79bf80 RCX: 00007f386f67cae9 [ 3206.926190][ T5314] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 3206.934117][ T5314] RBP: 00007f38703e2120 R08: ffffffffffffffff R09: 0000000000000000 [ 3206.941925][ T5314] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 3206.949736][ T5314] R13: 000000000000000b R14: 00007f386f79bf80 R15: 00007ffeb75a6308 [ 3206.957563][ T5314] [ 3206.960414][ T5314] Modules linked in: [ 3206.964607][ T5314] ---[ end trace 0000000000000000 ]--- [ 3206.969968][ T5314] RIP: 0010:mmap_region+0x225e/0x2390 [ 3206.975123][ T5314] Code: 03 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 1e fc ff ff 48 89 df e8 03 62 09 00 e9 11 fc ff ff e8 19 d9 c2 ff 0f 0b e8 12 d9 c2 ff <0f> 0b 65 8b 05 11 f4 4f 7e 41 89 c6 4c 89 f0 48 c1 e8 06 48 8d 3c [ 3206.994714][ T5314] RSP: 0018:ffffc9000d8d7a40 EFLAGS: 00010287 [ 3207.000694][ T5314] RAX: ffffffff81b21d3e RBX: 0000000020ffffff RCX: 0000000000040000 [ 3207.008721][ T5314] RDX: ffffc90001f3b000 RSI: 000000000000bf23 RDI: 000000000000bf24 [ 3207.016524][ T5314] RBP: ffffc9000d8d7c50 R08: ffffffff81b20981 R09: ffffffff84ec5cd3 [ 3207.024551][ T5314] R10: 0000000000000003 R11: ffff88810f382880 R12: ffffc9000d8d7ba8 [ 3207.032490][ T5314] R13: dffffc0000000000 R14: 0000000020ffe000 R15: 0000000021000000 [ 3207.040414][ T5314] FS: 00007f38703e26c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 3207.049393][ T5314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3207.055792][ T5314] CR2: 00007f37ead90024 CR3: 000000013c076000 CR4: 00000000003506a0 [ 3207.063807][ T5314] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3207.071627][ T5314] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3207.079485][ T5314] Kernel panic - not syncing: Fatal exception [ 3207.085602][ T5314] Kernel Offset: disabled [ 3207.089737][ T5314] Rebooting in 86400 seconds..