IOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x2f, 0x0, @local, @multicast2}}}}) 00:13:50 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x13, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7b0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x25, &(0x7f0000000140)=""/37, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x4, 0x3}], 0x10, 0x1}, 0x90) 00:13:50 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x6, 0x0}, 0x8) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x6}, 0x8) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) (async) 00:13:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 00:13:50 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 00:13:50 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x181, @time={0x916, 0x7}, 0x4, {0x40}, 0x27, 0x1, 0x1}) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:50 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x4, 0x2}, 0x48) 00:13:50 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x13, &(0x7f0000000040)=@ringbuf={{}, {}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7b0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x25, &(0x7f0000000140)=""/37, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x4, 0x3}], 0x10, 0x1}, 0x90) 00:13:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x2f, 0x0, @local, @multicast2}}}}) 00:13:50 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 00:13:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 00:13:51 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa0400) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x181, @time={0x916, 0x7}, 0x4, {0x40}, 0x27, 0x1, 0x1}) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:51 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x11, &(0x7f0000000040)=@ringbuf={{}, {}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x25, &(0x7f0000000140)=""/37, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x4, 0x3}], 0x10, 0x1}, 0x90) 00:13:51 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_METRONOME(r3, 0x40045407) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x2d, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb7e, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0x12, 0x5, 0x5, 0x100, 0xffffffffffffffff}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xb6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce9}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8613, 0x0, r3, 0x4, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=r2, @ANYBLOB="78000001000000b7020000014801ac141422011901830797ffffffdf0000000000000000000000000000000082f8df4983c022d01d64bc1ce2b37eaef28ca0a7"]}) 00:13:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x4, 0x2}, 0x48) 00:13:51 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xf, &(0x7f0000000040)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x25, &(0x7f0000000140)=""/37, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x4, 0x3}], 0x10, 0x1}, 0x90) 00:13:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x2f, 0x0, @local, @multicast2}}}}) 00:13:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x4030582b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0xa, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x10, 0x700, 0x624, 0x0, {{0x1e, 0x4, 0x1, 0x3, 0x78, 0x68, 0x0, 0x9, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xcb, 0x3, 0x5, [{@broadcast, 0xffffff79}]}, @rr={0x7, 0x7, 0x76, [@local]}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0xf, 0x6a, [@remote, @multicast1, @broadcast]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x26, 0x3, 0xf, [{@multicast1, 0x8}, {@private=0xa010102, 0x3}, {@private=0xa010102, 0x3}, {@multicast1, 0x20}, {@broadcast, 0x9}, {@loopback, 0x9}]}]}}}}}) 00:13:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 00:13:51 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_METRONOME(r3, 0x40045407) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x2d, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb7e, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x1, 0x12, 0x5, 0x5, 0x100, 0xffffffffffffffff}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8001}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xb6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfce9}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8613, 0x0, r3, 0x4, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='tunl0\x00'/16, @ANYRES32=r2, @ANYBLOB="78000001000000b7020000014801ac141422011901830797ffffffdf0000000000000000000000000000000082f8df4983c022d01d64bc1ce2b37eaef28ca0a7"]}) 00:13:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xf, &(0x7f0000000040)=@ringbuf, &(0x7f0000000100)='GPL\x00', 0x2, 0x25, &(0x7f0000000140)=""/37, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x4, 0x3}], 0x10, 0x1}, 0x90) 00:13:51 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r0, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffffffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_NET={0x70, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async, rerun: 64) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async, rerun: 64) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:51 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x4030582b, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0xa, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', r2}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x10, 0x700, 0x624, 0x0, {{0x1e, 0x4, 0x1, 0x3, 0x78, 0x68, 0x0, 0x9, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xcb, 0x3, 0x5, [{@broadcast, 0xffffff79}]}, @rr={0x7, 0x7, 0x76, [@local]}, @ra={0x94, 0x4}, @noop, @ssrr={0x89, 0xf, 0x6a, [@remote, @multicast1, @broadcast]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x26, 0x3, 0xf, [{@multicast1, 0x8}, {@private=0xa010102, 0x3}, {@private=0xa010102, 0x3}, {@multicast1, 0x20}, {@broadcast, 0x9}, {@loopback, 0x9}]}]}}}}}) 00:13:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 00:13:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x4, 0x2}, 0x48) 00:13:51 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8982, &(0x7f0000000e80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 00:13:51 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket(0x0, 0x4, 0x401) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2401c811) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xf, &(0x7f0000000040)=@ringbuf, 0x0, 0x2, 0x25, &(0x7f0000000140)=""/37, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x4, 0x3}], 0x10, 0x1}, 0x90) 00:13:51 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x7, 0x20, 0xa, @loopback, @loopback, 0x20, 0x20, 0x7ff, 0x3}}) r2 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x5421, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x4030582a, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r8, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r9, 0x4020940d, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$sndseq(r10, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r8, 0x4, 0x2, 0x3}, 0x48) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x40}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0xeb, &(0x7f0000000200)=""/235, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x56c4fa75, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000580)=[r2, r3, r4, r5, r6, r7, r8, r9, r10, r11], &(0x7f00000005c0)=[{0x3, 0x1, 0xa, 0x8}, {0x0, 0x4, 0x9, 0x6}, {0x2, 0x2, 0xc, 0x8}, {0x4, 0x5, 0xb, 0x6}, {0x1, 0x2, 0x3, 0x2}, {0x5, 0x3, 0x9, 0x5}, {0x5, 0x1, 0x5, 0xa}, {0x3, 0x2, 0xd, 0x1}], 0x10, 0x1f}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="6f7265300000f9ffffff000000000000", @ANYRES32=r1, @ANYBLOB="0020008000010000fffffff8410900440066000000299078e0000001e0000002442c3d03ffffffff000000006401010200000003fffffffffffffffe6401010200000003e00000010000000094040000"]}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r13, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x7c, r13, 0x404, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf7}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3a}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe80e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x7c}}, 0x4008000) 00:13:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x7, 0xd65, 0x2, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}]}, @timestamp_prespec={0x44, 0x44, 0x93, 0x3, 0x6, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0xfffeffff}, {@rand_addr=0x64010100, 0x40}, {@rand_addr=0x64010100, 0x9}, {@loopback, 0x3}, {@remote, 0x40}, {@local, 0x8}]}]}}}}}) 00:13:51 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8982, &(0x7f0000000e80)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8982, &(0x7f0000000e80)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) 00:13:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xf, &(0x7f0000000040)=@ringbuf, 0x0, 0x0, 0x25, &(0x7f0000000140)=""/37, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x4, 0x3}], 0x10, 0x1}, 0x90) 00:13:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0xd65, 0x2, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}]}, @timestamp_prespec={0x44, 0x44, 0x93, 0x3, 0x6, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0xfffeffff}, {@rand_addr=0x64010100, 0x40}, {@rand_addr=0x64010100, 0x9}, {@loopback, 0x3}, {@remote, 0x40}, {@local, 0x8}]}]}}}}}) 00:13:51 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async, rerun: 64) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async, rerun: 64) r1 = socket(0x0, 0x4, 0x401) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x17}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x2401c811) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x7, 0x20, 0xa, @loopback, @loopback, 0x20, 0x20, 0x7ff, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x7, 0x20, 0xa, @loopback, @loopback, 0x20, 0x20, 0x7ff, 0x3}}) syz_io_uring_complete(0x0) (async) r2 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x5421, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x4030582a, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r8, 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r8, 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r9, 0x4020940d, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$sndseq(r10, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r8, 0x4, 0x2, 0x3}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x3f, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r8, 0x4, 0x2, 0x3}, 0x48) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x40}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0xeb, &(0x7f0000000200)=""/235, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x56c4fa75, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000580)=[r2, r3, r4, r5, r6, r7, r8, r9, r10, r11], &(0x7f00000005c0)=[{0x3, 0x1, 0xa, 0x8}, {0x0, 0x4, 0x9, 0x6}, {0x2, 0x2, 0xc, 0x8}, {0x4, 0x5, 0xb, 0x6}, {0x1, 0x2, 0x3, 0x2}, {0x5, 0x3, 0x9, 0x5}, {0x5, 0x1, 0x5, 0xa}, {0x3, 0x2, 0xd, 0x1}], 0x10, 0x1f}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x40}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0xeb, &(0x7f0000000200)=""/235, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0xf, 0x56c4fa75, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000580)=[r2, r3, r4, r5, r6, r7, r8, r9, r10, r11], &(0x7f00000005c0)=[{0x3, 0x1, 0xa, 0x8}, {0x0, 0x4, 0x9, 0x6}, {0x2, 0x2, 0xc, 0x8}, {0x4, 0x5, 0xb, 0x6}, {0x1, 0x2, 0x3, 0x2}, {0x5, 0x3, 0x9, 0x5}, {0x5, 0x1, 0x5, 0xa}, {0x3, 0x2, 0xd, 0x1}], 0x10, 0x1f}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="6f7265300000f9ffffff000000000000", @ANYRES32=r1, @ANYBLOB="0020008000010000fffffff8410900440066000000299078e0000001e0000002442c3d03ffffffff000000006401010200000003fffffffffffffffe6401010200000003e00000010000000094040000"]}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="6f7265300000f9ffffff000000000000", @ANYRES32=r1, @ANYBLOB="0020008000010000fffffff8410900440066000000299078e0000001e0000002442c3d03ffffffff000000006401010200000003fffffffffffffffe6401010200000003e00000010000000094040000"]}) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r13, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x7c, r13, 0x404, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf7}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3a}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe80e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x7c}}, 0x4008000) 00:13:51 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xf, &(0x7f0000000040)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x4, 0x3}], 0x10, 0x1}, 0x90) 00:13:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', 0x0, r4, 0x4, 0x2}, 0x48) 00:13:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x4, 0x2}, 0x48) 00:13:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xf, &(0x7f0000000040)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x4, 0x3}], 0x10, 0x1}, 0x90) 00:13:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}]}, @timestamp_prespec={0x44, 0x44, 0x93, 0x3, 0x6, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0xfffeffff}, {@rand_addr=0x64010100, 0x40}, {@rand_addr=0x64010100, 0x9}, {@loopback, 0x3}, {@remote, 0x40}, {@local, 0x8}]}]}}}}}) 00:13:51 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 00:13:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x48, 0x1, 0x5, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x17, 0x6, 0x40}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x7800, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', 0x0, r4, 0x4, 0x2}, 0x48) 00:13:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', 0x0, r4, 0x4, 0x2}, 0x48) 00:13:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}]}, @timestamp_prespec={0x44, 0x44, 0x93, 0x3, 0x6, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0xfffeffff}, {@rand_addr=0x64010100, 0x40}, {@rand_addr=0x64010100, 0x9}, {@loopback, 0x3}, {@remote, 0x40}, {@local, 0x8}]}]}}}}}) 00:13:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xf, &(0x7f0000000040)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x4, 0x3}], 0x10, 0x1}, 0x90) 00:13:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x48, 0x1, 0x5, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x17, 0x6, 0x40}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x7800, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}]}, @timestamp_prespec={0x44, 0x44, 0x93, 0x3, 0x6, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0xfffeffff}, {@rand_addr=0x64010100, 0x40}, {@rand_addr=0x64010100, 0x9}, {@loopback, 0x3}, {@remote, 0x40}, {@local, 0x8}]}]}}}}}) 00:13:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x48, 0x1, 0x5, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x17, 0x6, 0x40}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x7800, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:51 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', 0x0, r4, 0x4, 0x2}, 0x48) 00:13:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xf, &(0x7f0000000040)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0xc, 0x0, 0x1000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x4, 0x3}], 0x10, 0x1}, 0x90) 00:13:51 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 00:13:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x48, 0x1, 0x5, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x17, 0x6, 0x40}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x7800, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x3, 0x4, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}]}, @timestamp_prespec={0x44, 0x44, 0x93, 0x3, 0x6, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0xfffeffff}, {@rand_addr=0x64010100, 0x40}, {@rand_addr=0x64010100, 0x9}, {@loopback, 0x3}, {@remote, 0x40}, {@local, 0x8}]}]}}}}}) 00:13:51 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xf, &(0x7f0000000040)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x4, 0x3}], 0x10, 0x1}, 0x90) 00:13:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) r3 = syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x7, 0x4, 0x8, 0x1008, r2, 0xf45, '\x00', r1, r3, 0x0, 0x0, 0x4}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='ip_\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0007004000000004000000024002004000670000ff29907864010100ac1414aa00830b4d7f000001ffffffff004414cc80000000080000003f0000800100000007890b53ac1414bbac141444"]}) r4 = syz_io_uring_complete(0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73797a746e6c30000000000002000000", @ANYRES32=r1, @ANYBLOB="00010007000000fffffff5ba480c006000660000a1069078ffffffffac1e0001071b23ffffffff00000000ac1414aa000000007f0000010a010101890f9ce0000001ac1414aa640101004420071000000053000000200000003f00000008000000fa00010000000000070000"]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x9, 0x7fffffff, 0x8, 0x1, 0x702, '\x00', r1, r4, 0x3, 0x3, 0x2, 0xd}, 0x48) 00:13:51 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x40, 0x40, 0xfffffff8, 0x40, {{0x1c, 0x4, 0x3, 0x21, 0x70, 0x66, 0x0, 0x7f, 0x4, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x28, 0x81, 0x0, 0x8, [0x3ff, 0xa4, 0xb80, 0x4, 0x7e7e, 0x8, 0x6, 0xe5d00000, 0x7f]}, @rr={0x7, 0xb, 0xc3, [@empty, @broadcast]}, @ssrr={0x89, 0x27, 0xc7, [@rand_addr=0x64010100, @rand_addr=0x80000000, @multicast1, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @private=0x2]}]}}}}}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000006, 0x2010, 0xffffffffffffffff, 0x10000000) r4 = epoll_create1(0x80000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x40, 0x0, r4, &(0x7f00000001c0)={0x8}, r5, 0x1, 0x0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x2f, 0x4, 0xff, 0x41, 0x8, @mcast2, @loopback, 0x40, 0x10, 0x27, 0x1}}) 00:13:51 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x0, 0x0}, 0x10) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', 0x0, r4, 0x4, 0x2}, 0x48) 00:13:51 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x48, 0x1, 0x5, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x17, 0x6, 0x40}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', r1, 0x7800, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}]}, @timestamp_prespec={0x44, 0x44, 0x93, 0x3, 0x6, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0xfffeffff}, {@rand_addr=0x64010100, 0x40}, {@rand_addr=0x64010100, 0x9}, {@loopback, 0x3}, {@remote, 0x40}, {@local, 0x8}]}]}}}}}) 00:13:51 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xf, &(0x7f0000000040)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) [ 831.847097][ T6184] Bluetooth: hci2: command 0x0405 tx timeout 00:13:51 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x40, 0x40, 0xfffffff8, 0x40, {{0x1c, 0x4, 0x3, 0x21, 0x70, 0x66, 0x0, 0x7f, 0x4, 0x0, @local, @multicast2, {[@timestamp={0x44, 0x28, 0x81, 0x0, 0x8, [0x3ff, 0xa4, 0xb80, 0x4, 0x7e7e, 0x8, 0x6, 0xe5d00000, 0x7f]}, @rr={0x7, 0xb, 0xc3, [@empty, @broadcast]}, @ssrr={0x89, 0x27, 0xc7, [@rand_addr=0x64010100, @rand_addr=0x80000000, @multicast1, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast, @private=0x2]}]}}}}}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x8000000) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000006, 0x2010, 0xffffffffffffffff, 0x10000000) r4 = epoll_create1(0x80000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x40, 0x0, r4, &(0x7f00000001c0)={0x8}, r5, 0x1, 0x0, 0x1}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r1, 0x2f, 0x4, 0xff, 0x41, 0x8, @mcast2, @loopback, 0x40, 0x10, 0x27, 0x1}}) 00:13:51 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010100, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}]}, @timestamp_prespec={0x44, 0x44, 0x93, 0x3, 0x6, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0xfffeffff}, {@rand_addr=0x64010100, 0x40}, {@rand_addr=0x64010100, 0x9}, {@loopback, 0x3}, {@remote, 0x40}, {@local, 0x8}]}]}}}}}) 00:13:51 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x0, 0x0}, 0x10) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', 0x0, r4, 0x4, 0x2}, 0x48) 00:13:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:51 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0xf, &(0x7f0000000040)=@ringbuf, 0x0}, 0x90) 00:13:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) r3 = syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x7, 0x4, 0x8, 0x1008, r2, 0xf45, '\x00', r1, r3, 0x0, 0x0, 0x4}, 0x48) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='ip_\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0007004000000004000000024002004000670000ff29907864010100ac1414aa00830b4d7f000001ffffffff004414cc80000000080000003f0000800100000007890b53ac1414bbac141444"]}) (async, rerun: 32) r4 = syz_io_uring_complete(0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73797a746e6c30000000000002000000", @ANYRES32=r1, @ANYBLOB="00010007000000fffffff5ba480c006000660000a1069078ffffffffac1e0001071b23ffffffff00000000ac1414aa000000007f0000010a010101890f9ce0000001ac1414aa640101004420071000000053000000200000003f00000008000000fa00010000000000070000"]}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x9, 0x7fffffff, 0x8, 0x1, 0x702, '\x00', r1, r4, 0x3, 0x3, 0x2, 0xd}, 0x48) 00:13:51 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, &(0x7f0000000000)=@short={0xb, @dev, @remote, 0x1, @bcast}, &(0x7f0000000040)=0x1c, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 00:13:51 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x80641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}]}, @timestamp_prespec={0x44, 0x44, 0x93, 0x3, 0x6, [{@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0xfffeffff}, {@rand_addr=0x64010100, 0x40}, {@rand_addr=0x64010100, 0x9}, {@loopback, 0x3}, {@remote, 0x40}, {@local, 0x8}]}]}}}}}) 00:13:51 executing program 4: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:52 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r0, &(0x7f0000000000)=@short={0xb, @dev, @remote, 0x1, @bcast}, &(0x7f0000000040)=0x1c, 0x80000) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 00:13:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x0, 0x0}, 0x10) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', 0x0, r4, 0x4, 0x2}, 0x48) 00:13:52 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x8, 0x2000}) 00:13:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @remote, {[@timestamp_prespec={0x44, 0xc, 0xd6, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}]}]}}}}}) 00:13:52 executing program 3: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x40305839, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, 0x0) 00:13:52 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x80641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x40305839, 0x0) (async) getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, 0x0) 00:13:52 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xf, 0x2000}) 00:13:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @remote}}}}) 00:13:52 executing program 0: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:13:52 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xf4, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff8e2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:52 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) 00:13:52 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x11, 0x2000}) 00:13:52 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:52 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xf4, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'tunl0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffff8e2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r1) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:52 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x22, 0x2000}) 00:13:52 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:13:52 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) 00:13:52 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:52 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x204, 0x2000}) 00:13:52 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:52 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) 00:13:52 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x5c, r0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa7d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe00000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4090) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000480), 0x4) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000000c0)='.\x00', 0x2) 00:13:52 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 00:13:52 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x300, 0x2000}) 00:13:52 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) 00:13:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 00:13:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 00:13:52 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x5c, r0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa7d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe00000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4090) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000480), 0x4) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000000c0)='.\x00', 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x5c, r0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa7d}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe00000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4090) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000000c0)='.\x00', 0x2) (async) 00:13:52 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x402, 0x2000}) 00:13:52 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 00:13:52 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 00:13:52 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x406, 0x2000}) 00:13:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r3, r4, 0x4, 0x2}, 0x48) 00:13:52 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x154, r0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3fff8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xecb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d4f0d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x5452, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000000c0)=0x3) io_uring_setup(0x6420, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:52 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x5421, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r1, 0x0, 0x2, 0x1}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, r1, 0x2, 0x0, 0x1}, 0x48) 00:13:52 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 00:13:52 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x604, 0x2000}) 00:13:52 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) socket$inet_udplite(0x2, 0x2, 0x88) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) (async) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 00:13:52 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x5421, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, r1, 0x0, 0x2, 0x1}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, r1, 0x2, 0x0, 0x1}, 0x48) 00:13:52 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x154, r0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3fff8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xecb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d4f0d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x5452, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000000c0)=0x3) io_uring_setup(0x6420, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x154, r0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3fff8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xecb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1d4f0d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_ADDR={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x5452, 0x0) (async) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f00000000c0)=0x3) (async) io_uring_setup(0x6420, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) 00:13:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 00:13:52 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$rxrpc(r0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@loopback, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x10, 0x7800, 0x0, 0xffff8000, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x65, 0x0, 0x5, 0x2f, 0x0, @loopback, @multicast1, {[@end, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x4c, [@loopback, @local, @private=0xa010101, @local, @empty, @multicast2, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) 00:13:52 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r3, r4, 0x4, 0x2}, 0x48) 00:13:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="65727370616e3000000077ea1e167d5add7ff447b57c3a0000", @ANYRES32=r1, @ANYBLOB="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"]}) 00:13:53 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x700, 0x2000}) 00:13:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 00:13:53 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:53 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$rxrpc(r0, 0x0, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000000)={@loopback, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x10, 0x7800, 0x0, 0xffff8000, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x65, 0x0, 0x5, 0x2f, 0x0, @loopback, @multicast1, {[@end, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x4c, [@loopback, @local, @private=0xa010101, @local, @empty, @multicast2, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) 00:13:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="65727370616e3000000077ea1e167d5add7ff447b57c3a0000", @ANYRES32=r1, @ANYBLOB="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"]}) 00:13:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) 00:13:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:53 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:53 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xf00, 0x2000}) 00:13:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r3, r4, 0x4, 0x2}, 0x48) 00:13:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:53 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x1100, 0x2000}) 00:13:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', r2, 0x8, 0x7800, 0x7fff, 0x4, {{0x38, 0x4, 0x2, 0x3a, 0xe0, 0x65, 0x0, 0xde, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xb0, 0x0, 0x8, [0x200, 0x2, 0x8, 0x101, 0x9, 0x5, 0x7ff]}, @cipso={0x86, 0xd, 0x3, [{0x6, 0x7, "1e842aa1f7"}]}, @timestamp_prespec={0x44, 0x2c, 0xb5, 0x3, 0x6, [{@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x3}, {@remote, 0x6}, {@remote, 0x1}]}, @timestamp_prespec={0x44, 0x54, 0xdd, 0x3, 0x3, [{@empty, 0x448c}, {@local, 0x28}, {@remote, 0x3f}, {@multicast1, 0x2}, {@rand_addr=0x64010100, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x3}, {@local}, {@multicast1, 0x4}, {@broadcast, 0xfffffffe}, {@local, 0x65}]}, @generic={0x94, 0x7, "13f52f4dda"}, @ssrr={0x89, 0x17, 0x3c, [@multicast2, @private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x80, 0x80, 0x5b, 0x7, {{0x1e, 0x4, 0x2, 0x7, 0x78, 0x65, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_addr={0x44, 0x34, 0x62, 0x1, 0x3, [{@multicast2, 0xffff7c73}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x6}, {@broadcast, 0x8}, {@multicast1, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1000}]}, @timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@rand_addr=0x64010100, 0x7}]}, @ssrr={0x89, 0x1b, 0xac, [@remote, @rand_addr=0x64010102, @empty, @empty, @loopback, @loopback]}]}}}}}) 00:13:53 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000100)=0x14) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x8, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xbe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb14, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x4, 0x9, 0x4, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @exit, @jmp={0x5, 0x0, 0x2, 0x2, 0x6, 0x80, 0xfffffffffffffff9}], &(0x7f0000000240)='GPL\x00', 0xf8e, 0x38, &(0x7f0000000280)=""/56, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xa, 0xea, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000380)=[{0x3, 0x1000, 0xc, 0x7}], 0x10, 0x6}, 0x90) r3 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xe79, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0xc0045878, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6b7}, [@alu={0x4, 0x1, 0xa, 0xa, 0x1, 0x1c, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x1, 0x3, 0x0, 0x2, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1a, &(0x7f0000000080)=""/26, 0x0, 0x62, '\x00', r0, 0x22, r1, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x7}, 0x10, 0xffffffffffffffff, r2, 0x2, &(0x7f00000006c0)=[r3, 0x1, r4, r5, r6, r7, r8, r9, 0xffffffffffffffff], &(0x7f0000000700)=[{0x3, 0x2, 0xb, 0x5}, {0x3, 0x4, 0x10, 0x1}], 0x10, 0x2}, 0x90) 00:13:53 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x80000, 0x31c}) 00:13:53 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x2200, 0x2000}) 00:13:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) 00:13:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x20, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r2}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', r2, 0x8, 0x7800, 0x7fff, 0x4, {{0x38, 0x4, 0x2, 0x3a, 0xe0, 0x65, 0x0, 0xde, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x20, 0xb0, 0x0, 0x8, [0x200, 0x2, 0x8, 0x101, 0x9, 0x5, 0x7ff]}, @cipso={0x86, 0xd, 0x3, [{0x6, 0x7, "1e842aa1f7"}]}, @timestamp_prespec={0x44, 0x2c, 0xb5, 0x3, 0x6, [{@rand_addr=0x64010101, 0x1}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x3}, {@remote, 0x6}, {@remote, 0x1}]}, @timestamp_prespec={0x44, 0x54, 0xdd, 0x3, 0x3, [{@empty, 0x448c}, {@local, 0x28}, {@remote, 0x3f}, {@multicast1, 0x2}, {@rand_addr=0x64010100, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x3}, {@local}, {@multicast1, 0x4}, {@broadcast, 0xfffffffe}, {@local, 0x65}]}, @generic={0x94, 0x7, "13f52f4dda"}, @ssrr={0x89, 0x17, 0x3c, [@multicast2, @private=0xa010100, @local, @dev={0xac, 0x14, 0x14, 0x12}, @broadcast]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x80, 0x80, 0x5b, 0x7, {{0x1e, 0x4, 0x2, 0x7, 0x78, 0x65, 0x0, 0x1, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x19}, {[@timestamp_addr={0x44, 0x34, 0x62, 0x1, 0x3, [{@multicast2, 0xffff7c73}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x6}, {@broadcast, 0x8}, {@multicast1, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x1000}]}, @timestamp_addr={0x44, 0x14, 0x5c, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffff}, {@rand_addr=0x64010100, 0x7}]}, @ssrr={0x89, 0x1b, 0xac, [@remote, @rand_addr=0x64010102, @empty, @empty, @loopback, @loopback]}]}}}}}) 00:13:53 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', r4, r5, 0x4, 0x2}, 0x48) 00:13:53 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@dev, 0x0}, &(0x7f0000000100)=0x14) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x8, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xbe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb14, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x4, 0x9, 0x4, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @exit, @jmp={0x5, 0x0, 0x2, 0x2, 0x6, 0x80, 0xfffffffffffffff9}], &(0x7f0000000240)='GPL\x00', 0xf8e, 0x38, &(0x7f0000000280)=""/56, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xa, 0xea, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000380)=[{0x3, 0x1000, 0xc, 0x7}], 0x10, 0x6}, 0x90) r3 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xe79, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0xc0045878, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6b7}, [@alu={0x4, 0x1, 0xa, 0xa, 0x1, 0x1c, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x1, 0x3, 0x0, 0x2, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1a, &(0x7f0000000080)=""/26, 0x0, 0x62, '\x00', r0, 0x22, r1, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x7}, 0x10, 0xffffffffffffffff, r2, 0x2, &(0x7f00000006c0)=[r3, 0x1, r4, r5, r6, r7, r8, r9, 0xffffffffffffffff], &(0x7f0000000700)=[{0x3, 0x2, 0xb, 0x5}, {0x3, 0x4, 0x10, 0x1}], 0x10, 0x2}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xe, 0x0, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@dev}, &(0x7f0000000100)=0x14) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x8, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xbe}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb14, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x4, 0x9, 0x4, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @exit, @jmp={0x5, 0x0, 0x2, 0x2, 0x6, 0x80, 0xfffffffffffffff9}], &(0x7f0000000240)='GPL\x00', 0xf8e, 0x38, &(0x7f0000000280)=""/56, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xa, 0xea, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0x1], &(0x7f0000000380)=[{0x3, 0x1000, 0xc, 0x7}], 0x10, 0x6}, 0x90) (async) syz_io_uring_complete(0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1}, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xe79, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0xc0045878, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6b7}, [@alu={0x4, 0x1, 0xa, 0xa, 0x1, 0x1c, 0xfffffffffffffff0}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @ldst={0x1, 0x3, 0x0, 0x2, 0xa, 0xfffffffffffffffe, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x1a, &(0x7f0000000080)=""/26, 0x0, 0x62, '\x00', r0, 0x22, r1, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x7}, 0x10, 0xffffffffffffffff, r2, 0x2, &(0x7f00000006c0)=[r3, 0x1, r4, r5, r6, r7, r8, r9, 0xffffffffffffffff], &(0x7f0000000700)=[{0x3, 0x2, 0xb, 0x5}, {0x3, 0x4, 0x10, 0x1}], 0x10, 0x2}, 0x90) (async) 00:13:53 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x800000, 0x2000}) 00:13:53 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (rerun: 64) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x80000, 0x31c}) 00:13:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x4, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:53 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x1000000, 0x2000}) 00:13:53 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f0000000340)=@raw=[@ringbuf_query, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}], &(0x7f00000003c0)='GPL\x00', 0xfffffc4d, 0xc6, &(0x7f0000000400)=""/198, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x4, 0xc45f, 0x40}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x1, 0x1, 0xc, 0x7}, {0x3, 0x2, 0x9, 0x8}], 0x10, 0xd3}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x619f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x14, 0x13, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @generic={0x5, 0x5, 0x6, 0x1ff, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000180)='GPL\x00', 0x0, 0x4a, &(0x7f00000001c0)=""/74, 0x41100, 0x20, '\x00', r1, 0x10, r2, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xf, 0x1, 0x1}, 0x10, 0x0, r3, 0x6, &(0x7f00000007c0)=[r4, r5], &(0x7f0000000800)=[{0x2, 0x3, 0x6, 0x9}, {0x3, 0x3, 0xd, 0x7}, {0x3, 0x5, 0x1, 0x7}, {0x5, 0x4, 0x5, 0xa}, {0x0, 0x4, 0x800}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x6}, 0x90) 00:13:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000300)={'erspan0\x00', r2, 0x40, 0x7800, 0x7, 0xfff, {{0x25, 0x4, 0x2, 0x6, 0x94, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0x13, 0x4f, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x12, 0x10, "472adb5153d6f6112b1885c4869a"}, @generic={0x7, 0xa, "1dec1973464d5e7c"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x54, 0x1, 0x5, [{@empty, 0x9}, {@private=0xa010100, 0xcd5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x74d7f36}]}, @noop, @rr={0x7, 0x7, 0x31, [@private=0xa010101]}, @generic={0x88, 0xb, "12f781acbafdb51850"}, @timestamp_addr={0x44, 0xc, 0x44, 0x1, 0x4, [{@multicast1, 0x9}]}, @timestamp_addr={0x44, 0x14, 0x19, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x800081}, {@private=0xa010100}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', r2, 0x10, 0x8, 0xbc, 0x3ff, {{0x3d, 0x4, 0x2, 0x24, 0xf4, 0x66, 0x0, 0x40, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@cipso={0x86, 0x51, 0x3, [{0x0, 0x12, "43d37ea00be211bec11c115093f853ee"}, {0x7, 0x9, "6c957a10d36b7e"}, {0x2, 0x7, "130e26771c"}, {0x7, 0x8, "27d7d1c4460d"}, {0x1, 0x3, "97"}, {0x0, 0x3, "9f"}, {0x5, 0xe, "e8e94819fe7f7f386f07f334"}, {0x2, 0xd, "e4d0e84b01f99a4b7d57f9"}]}, @timestamp={0x44, 0xc, 0x4a, 0x0, 0x0, [0x7, 0x3]}, @cipso={0x86, 0x1c, 0x0, [{0x0, 0xa, "a0ecf91a1c0f4c8a"}, {0x2, 0x9, "a07c028e5ef1f1"}, {0x7, 0x3, "99"}]}, @cipso={0x86, 0x65, 0x0, [{0x0, 0x9, "2157ee2e9c1163"}, {0x5, 0xd, "3a2dbe52965e9b2ec5ae53"}, {0x6, 0x10, "da7140e0e7f35605ad2cd7e43348"}, {0x6, 0x2}, {0x6, 0xb, "86daefe487bff96efa"}, {0x6, 0x4, "30a8"}, {0x5, 0x7, "4819853caf"}, {0x0, 0x12, "b86e95ea5def8ee5d9f2ecfa7f6b3a78"}, {0x1, 0x6, "17c745e9"}, {0x6, 0x9, "0f862eb6e8cf2c"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r3, 0x40, 0x8000, 0x3ff, 0x2, {{0x2b, 0x4, 0x0, 0x8, 0xac, 0x66, 0x0, 0x6, 0x2f, 0x0, @loopback, @local, {[@generic={0x83, 0x4, "a6ea"}, @timestamp_prespec={0x44, 0x3c, 0x8f, 0x3, 0x2, [{@loopback, 0x4}, {@dev, 0xffffd8f8}, {@rand_addr=0x64010101, 0x1}, {@multicast1, 0x6}, {@loopback, 0x9}, {@multicast1, 0x2}, {@loopback, 0x3}]}, @lsrr={0x83, 0x13, 0xc2, [@multicast2, @rand_addr=0x64010100, @local, @loopback]}, @generic={0x44, 0x11, "769ba2b01b03913a1b7a06ef5afcbc"}, @lsrr={0x83, 0x23, 0x15, [@rand_addr=0x64010102, @empty, @empty, @remote, @rand_addr=0x64010100, @private=0xa010102, @rand_addr=0x64010101, @multicast1]}, @timestamp={0x44, 0x10, 0xf7, 0x0, 0x3, [0x16, 0x2b, 0x3f]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8020040}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r5, 0x30, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x4018480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) 00:13:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', r4, r5, 0x4, 0x2}, 0x48) 00:13:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0xdb, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:53 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x2000000, 0x2000}) 00:13:53 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf250800060040318c42fbd2ec40752535e66e05e9b65ef595918bca43c06be26dd93c488c"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) 00:13:53 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f0000000340)=@raw=[@ringbuf_query, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}], &(0x7f00000003c0)='GPL\x00', 0xfffffc4d, 0xc6, &(0x7f0000000400)=""/198, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x4, 0xc45f, 0x40}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x1, 0x1, 0xc, 0x7}, {0x3, 0x2, 0x9, 0x8}], 0x10, 0xd3}, 0x90) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x619f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x14, 0x13, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @generic={0x5, 0x5, 0x6, 0x1ff, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000180)='GPL\x00', 0x0, 0x4a, &(0x7f00000001c0)=""/74, 0x41100, 0x20, '\x00', r1, 0x10, r2, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xf, 0x1, 0x1}, 0x10, 0x0, r3, 0x6, &(0x7f00000007c0)=[r4, r5], &(0x7f0000000800)=[{0x2, 0x3, 0x6, 0x9}, {0x3, 0x3, 0xd, 0x7}, {0x3, 0x5, 0x1, 0x7}, {0x5, 0x4, 0x5, 0xa}, {0x0, 0x4, 0x800}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x6}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f0000000340)=@raw=[@ringbuf_query, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}], &(0x7f00000003c0)='GPL\x00', 0xfffffc4d, 0xc6, &(0x7f0000000400)=""/198, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x4, 0xc45f, 0x40}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x1, 0x1, 0xc, 0x7}, {0x3, 0x2, 0x9, 0x8}], 0x10, 0xd3}, 0x90) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x619f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x14, 0x13, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @generic={0x5, 0x5, 0x6, 0x1ff, 0x2}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000180)='GPL\x00', 0x0, 0x4a, &(0x7f00000001c0)=""/74, 0x41100, 0x20, '\x00', r1, 0x10, r2, 0x8, &(0x7f00000002c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xf, 0x1, 0x1}, 0x10, 0x0, r3, 0x6, &(0x7f00000007c0)=[r4, r5], &(0x7f0000000800)=[{0x2, 0x3, 0x6, 0x9}, {0x3, 0x3, 0xd, 0x7}, {0x3, 0x5, 0x1, 0x7}, {0x5, 0x4, 0x5, 0xa}, {0x0, 0x4, 0x800}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x6}, 0x90) (async) 00:13:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x2, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000300)={'erspan0\x00', r2, 0x40, 0x7800, 0x7, 0xfff, {{0x25, 0x4, 0x2, 0x6, 0x94, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0x13, 0x4f, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x12, 0x10, "472adb5153d6f6112b1885c4869a"}, @generic={0x7, 0xa, "1dec1973464d5e7c"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x54, 0x1, 0x5, [{@empty, 0x9}, {@private=0xa010100, 0xcd5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x74d7f36}]}, @noop, @rr={0x7, 0x7, 0x31, [@private=0xa010101]}, @generic={0x88, 0xb, "12f781acbafdb51850"}, @timestamp_addr={0x44, 0xc, 0x44, 0x1, 0x4, [{@multicast1, 0x9}]}, @timestamp_addr={0x44, 0x14, 0x19, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x800081}, {@private=0xa010100}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', r2, 0x10, 0x8, 0xbc, 0x3ff, {{0x3d, 0x4, 0x2, 0x24, 0xf4, 0x66, 0x0, 0x40, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@cipso={0x86, 0x51, 0x3, [{0x0, 0x12, "43d37ea00be211bec11c115093f853ee"}, {0x7, 0x9, "6c957a10d36b7e"}, {0x2, 0x7, "130e26771c"}, {0x7, 0x8, "27d7d1c4460d"}, {0x1, 0x3, "97"}, {0x0, 0x3, "9f"}, {0x5, 0xe, "e8e94819fe7f7f386f07f334"}, {0x2, 0xd, "e4d0e84b01f99a4b7d57f9"}]}, @timestamp={0x44, 0xc, 0x4a, 0x0, 0x0, [0x7, 0x3]}, @cipso={0x86, 0x1c, 0x0, [{0x0, 0xa, "a0ecf91a1c0f4c8a"}, {0x2, 0x9, "a07c028e5ef1f1"}, {0x7, 0x3, "99"}]}, @cipso={0x86, 0x65, 0x0, [{0x0, 0x9, "2157ee2e9c1163"}, {0x5, 0xd, "3a2dbe52965e9b2ec5ae53"}, {0x6, 0x10, "da7140e0e7f35605ad2cd7e43348"}, {0x6, 0x2}, {0x6, 0xb, "86daefe487bff96efa"}, {0x6, 0x4, "30a8"}, {0x5, 0x7, "4819853caf"}, {0x0, 0x12, "b86e95ea5def8ee5d9f2ecfa7f6b3a78"}, {0x1, 0x6, "17c745e9"}, {0x6, 0x9, "0f862eb6e8cf2c"}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r3, 0x40, 0x8000, 0x3ff, 0x2, {{0x2b, 0x4, 0x0, 0x8, 0xac, 0x66, 0x0, 0x6, 0x2f, 0x0, @loopback, @local, {[@generic={0x83, 0x4, "a6ea"}, @timestamp_prespec={0x44, 0x3c, 0x8f, 0x3, 0x2, [{@loopback, 0x4}, {@dev, 0xffffd8f8}, {@rand_addr=0x64010101, 0x1}, {@multicast1, 0x6}, {@loopback, 0x9}, {@multicast1, 0x2}, {@loopback, 0x3}]}, @lsrr={0x83, 0x13, 0xc2, [@multicast2, @rand_addr=0x64010100, @local, @loopback]}, @generic={0x44, 0x11, "769ba2b01b03913a1b7a06ef5afcbc"}, @lsrr={0x83, 0x23, 0x15, [@rand_addr=0x64010102, @empty, @empty, @remote, @rand_addr=0x64010100, @private=0xa010102, @rand_addr=0x64010101, @multicast1]}, @timestamp={0x44, 0x10, 0xf7, 0x0, 0x3, [0x16, 0x2b, 0x3f]}]}}}}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8020040}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r5, 0x30, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x4018480) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000300)={'erspan0\x00', r2, 0x40, 0x7800, 0x7, 0xfff, {{0x25, 0x4, 0x2, 0x6, 0x94, 0x67, 0x0, 0x1, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0x13, 0x4f, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x12, 0x10, "472adb5153d6f6112b1885c4869a"}, @generic={0x7, 0xa, "1dec1973464d5e7c"}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x54, 0x1, 0x5, [{@empty, 0x9}, {@private=0xa010100, 0xcd5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x74d7f36}]}, @noop, @rr={0x7, 0x7, 0x31, [@private=0xa010101]}, @generic={0x88, 0xb, "12f781acbafdb51850"}, @timestamp_addr={0x44, 0xc, 0x44, 0x1, 0x4, [{@multicast1, 0x9}]}, @timestamp_addr={0x44, 0x14, 0x19, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x800081}, {@private=0xa010100}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl2\x00', r2, 0x10, 0x8, 0xbc, 0x3ff, {{0x3d, 0x4, 0x2, 0x24, 0xf4, 0x66, 0x0, 0x40, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2, {[@cipso={0x86, 0x51, 0x3, [{0x0, 0x12, "43d37ea00be211bec11c115093f853ee"}, {0x7, 0x9, "6c957a10d36b7e"}, {0x2, 0x7, "130e26771c"}, {0x7, 0x8, "27d7d1c4460d"}, {0x1, 0x3, "97"}, {0x0, 0x3, "9f"}, {0x5, 0xe, "e8e94819fe7f7f386f07f334"}, {0x2, 0xd, "e4d0e84b01f99a4b7d57f9"}]}, @timestamp={0x44, 0xc, 0x4a, 0x0, 0x0, [0x7, 0x3]}, @cipso={0x86, 0x1c, 0x0, [{0x0, 0xa, "a0ecf91a1c0f4c8a"}, {0x2, 0x9, "a07c028e5ef1f1"}, {0x7, 0x3, "99"}]}, @cipso={0x86, 0x65, 0x0, [{0x0, 0x9, "2157ee2e9c1163"}, {0x5, 0xd, "3a2dbe52965e9b2ec5ae53"}, {0x6, 0x10, "da7140e0e7f35605ad2cd7e43348"}, {0x6, 0x2}, {0x6, 0xb, "86daefe487bff96efa"}, {0x6, 0x4, "30a8"}, {0x5, 0x7, "4819853caf"}, {0x0, 0x12, "b86e95ea5def8ee5d9f2ecfa7f6b3a78"}, {0x1, 0x6, "17c745e9"}, {0x6, 0x9, "0f862eb6e8cf2c"}]}]}}}}}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r3, 0x40, 0x8000, 0x3ff, 0x2, {{0x2b, 0x4, 0x0, 0x8, 0xac, 0x66, 0x0, 0x6, 0x2f, 0x0, @loopback, @local, {[@generic={0x83, 0x4, "a6ea"}, @timestamp_prespec={0x44, 0x3c, 0x8f, 0x3, 0x2, [{@loopback, 0x4}, {@dev, 0xffffd8f8}, {@rand_addr=0x64010101, 0x1}, {@multicast1, 0x6}, {@loopback, 0x9}, {@multicast1, 0x2}, {@loopback, 0x3}]}, @lsrr={0x83, 0x13, 0xc2, [@multicast2, @rand_addr=0x64010100, @local, @loopback]}, @generic={0x44, 0x11, "769ba2b01b03913a1b7a06ef5afcbc"}, @lsrr={0x83, 0x23, 0x15, [@rand_addr=0x64010102, @empty, @empty, @remote, @rand_addr=0x64010100, @private=0xa010102, @rand_addr=0x64010101, @multicast1]}, @timestamp={0x44, 0x10, 0xf7, 0x0, 0x3, [0x16, 0x2b, 0x3f]}]}}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8020040}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r5, 0x30, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x4018480) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) (async) 00:13:53 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x2040000, 0x2000}) 00:13:53 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf250800060040318c42fbd2ec40752535e66e05e9b65ef595918bca43c06be26dd93c488c"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) 00:13:53 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0xaa7, 0x1f74, 0xafb7, 0x0, 0xffffffffffffffff, 0xffffff1d, '\x00', r0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7ff, '\x00', r0, r1, 0x0, 0x0, 0x2}, 0x48) 00:13:53 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x3000000, 0x2000}) 00:13:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x14, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:53 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', r4, r5, 0x4, 0x2}, 0x48) 00:13:53 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0xaa7, 0x1f74, 0xafb7, 0x0, 0xffffffffffffffff, 0xffffff1d, '\x00', r0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7ff, '\x00', r0, r1, 0x0, 0x0, 0x2}, 0x48) 00:13:53 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="83696a8999e26a4d392f066c98e34bfb50c63e8b044a391799f2b3aa8ff462f876b0b988b078c5ff115d62330ef94b5aeb933896ad098d4b24d172a312f7153e3acfd3e8a2f7c626df59592592393a1c95fc24be7dbe074b2b2c873853d04a23f7e1d0b956"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:53 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x4000000, 0x2000}) 00:13:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x64, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0xc7, 0x1, 0x1, 0x401, {{0x1d, 0x4, 0x1, 0x3, 0x74, 0x68, 0x0, 0x0, 0x2f, 0x0, @local, @remote, {[@ssrr={0x89, 0x27, 0xb1, [@multicast2, @multicast2, @private=0xa010101, @private=0xa010102, @rand_addr=0x64010101, @multicast2, @remote, @empty, @private=0xa010102]}, @timestamp_addr={0x44, 0x24, 0x2d, 0x1, 0x1, [{@broadcast, 0x4}, {@broadcast, 0x8}, {@local, 0x8}, {@broadcast, 0x1}]}, @cipso={0x86, 0x11, 0x1, [{0x6, 0xb, "d47a0995b81791216d"}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000100)={'gretap0\x00', r1, 0x7800, 0x20, 0x3, 0x9, {{0x8, 0x4, 0x3, 0x5, 0x20, 0x68, 0x0, 0xff, 0x4, 0x0, @empty, @multicast2, {[@generic={0x89, 0x9, "562256fe283c7e"}]}}}}}) 00:13:53 executing program 2: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="83696a8999e26a4d392f066c98e34bfb50c63e8b044a391799f2b3aa8ff462f876b0b988b078c5ff115d62330ef94b5aeb933896ad098d4b24d172a312f7153e3acfd3e8a2f7c626df59592592393a1c95fc24be7dbe074b2b2c873853d04a23f7e1d0b956"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:53 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x9, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) 00:13:53 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x6040000, 0x2000}) 00:13:53 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf25802696cddec142384a0075e39127b6ac08000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x20, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:53 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', 0x0, r4, 0x4, 0x2}, 0x48) 00:13:53 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', r4, r5, 0x4, 0x2}, 0x48) 00:13:53 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x9, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) (rerun: 64) 00:13:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0xc7, 0x1, 0x1, 0x401, {{0x1d, 0x4, 0x1, 0x3, 0x74, 0x68, 0x0, 0x0, 0x2f, 0x0, @local, @remote, {[@ssrr={0x89, 0x27, 0xb1, [@multicast2, @multicast2, @private=0xa010101, @private=0xa010102, @rand_addr=0x64010101, @multicast2, @remote, @empty, @private=0xa010102]}, @timestamp_addr={0x44, 0x24, 0x2d, 0x1, 0x1, [{@broadcast, 0x4}, {@broadcast, 0x8}, {@local, 0x8}, {@broadcast, 0x1}]}, @cipso={0x86, 0x11, 0x1, [{0x6, 0xb, "d47a0995b81791216d"}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000100)={'gretap0\x00', r1, 0x7800, 0x20, 0x3, 0x9, {{0x8, 0x4, 0x3, 0x5, 0x20, 0x68, 0x0, 0xff, 0x4, 0x0, @empty, @multicast2, {[@generic={0x89, 0x9, "562256fe283c7e"}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0xc7, 0x1, 0x1, 0x401, {{0x1d, 0x4, 0x1, 0x3, 0x74, 0x68, 0x0, 0x0, 0x2f, 0x0, @local, @remote, {[@ssrr={0x89, 0x27, 0xb1, [@multicast2, @multicast2, @private=0xa010101, @private=0xa010102, @rand_addr=0x64010101, @multicast2, @remote, @empty, @private=0xa010102]}, @timestamp_addr={0x44, 0x24, 0x2d, 0x1, 0x1, [{@broadcast, 0x4}, {@broadcast, 0x8}, {@local, 0x8}, {@broadcast, 0x1}]}, @cipso={0x86, 0x11, 0x1, [{0x6, 0xb, "d47a0995b81791216d"}]}, @noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000100)={'gretap0\x00', r1, 0x7800, 0x20, 0x3, 0x9, {{0x8, 0x4, 0x3, 0x5, 0x20, 0x68, 0x0, 0xff, 0x4, 0x0, @empty, @multicast2, {[@generic={0x89, 0x9, "562256fe283c7e"}]}}}}}) (async) 00:13:53 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf25802696cddec142384a0075e39127b6ac08000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) [ 833.926705][ T6184] Bluetooth: hci2: command 0x0405 tx timeout 00:13:53 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x7000000, 0x2000}) 00:13:53 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r2 = io_uring_setup(0xd87, &(0x7f00000000c0)={0x0, 0x73b0, 0x4, 0x1, 0x3cb, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x10000000) 00:13:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'tunl0\x00', r1, 0x80, 0x40, 0x1, 0x1, {{0xd, 0x4, 0x0, 0x8, 0x34, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2a}, {[@noop, @timestamp_addr={0x44, 0x1c, 0x9a, 0x1, 0x4, [{@multicast1, 0x2}, {@private=0xa010101, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x1}]}]}}}}}) 00:13:54 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x401c5820, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', r2, r3, 0x1, 0x5, 0x3}, 0x48) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 00:13:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000811) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6c6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x34}}, 0x4800) 00:13:54 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x8000000, 0x2000}) 00:13:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', 0x0, r4, 0x4, 0x2}, 0x48) 00:13:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010100, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:54 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r2 = io_uring_setup(0xd87, &(0x7f00000000c0)={0x0, 0x73b0, 0x4, 0x1, 0x3cb, 0x0, r1}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x10000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) io_uring_setup(0xd87, &(0x7f00000000c0)={0x0, 0x73b0, 0x4, 0x1, 0x3cb, 0x0, r1}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x13, r2, 0x10000000) (async) 00:13:54 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'tunl0\x00', r1, 0x80, 0x40, 0x1, 0x1, {{0xd, 0x4, 0x0, 0x8, 0x34, 0x66, 0x0, 0x0, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2a}, {[@noop, @timestamp_addr={0x44, 0x1c, 0x9a, 0x1, 0x4, [{@multicast1, 0x2}, {@private=0xa010101, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x1}]}]}}}}}) 00:13:54 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xf000000, 0x2000}) 00:13:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', 0x0, r4, 0x4, 0x2}, 0x48) 00:13:54 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}) 00:13:54 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x401c5820, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x6, '\x00', r2, r3, 0x1, 0x5, 0x3}, 0x48) (async) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 00:13:54 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x1, 0xffff, 0x1, 0x0, 0x3f, 0x3, 0x4000000000000000, 0x8000}, &(0x7f0000000040)={0x3, 0x0, 0x40, 0x8, 0x8, 0x9, 0x10000, 0x5c7d}, &(0x7f0000000080)={0xffffffff00000001, 0x8, 0xff, 0x8, 0x6, 0x4, 0x1, 0x1}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0xbb]}, 0x8}) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x39, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}]}}}}}) 00:13:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:54 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x11000000, 0x2000}) 00:13:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2}, 0x48) 00:13:54 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) r4 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', 0x0, r4, 0x4, 0x2}, 0x48) 00:13:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}]}}}}}) 00:13:54 executing program 3: pselect6(0x40, &(0x7f0000000000)={0x1, 0xffff, 0x1, 0x0, 0x3f, 0x3, 0x4000000000000000, 0x8000}, &(0x7f0000000040)={0x3, 0x0, 0x40, 0x8, 0x8, 0x9, 0x10000, 0x5c7d}, &(0x7f0000000080)={0xffffffff00000001, 0x8, 0xff, 0x8, 0x6, 0x4, 0x1, 0x1}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0xbb]}, 0x8}) (async) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:54 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x740, 0x8020, 0x200, 0xfffffffa, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x66, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@noop]}}}}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x6, 0x2, 0x7, 0x4, 0xfffffffffffffff0}], &(0x7f0000000180)='GPL\x00', 0x1, 0xf6, &(0x7f00000001c0)=""/246, 0x41000, 0x1, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x5, 0xe18, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0, r0, r0, r0, r0, r2, r0], 0x0, 0x10, 0xfffffff9}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x11, r0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @private, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r3, 0x4, 0x80, 0x7, 0x2, 0x6d824453c90b3970, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x1, 0x80, 0x6, 0x4}}) 00:13:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}]}}}}}) 00:13:54 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}) 00:13:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800000800000000100000002491e006400680000088390780a010101a79074aa860492d444243f5164010102fffffff7ac1414aa00000003ac14ff7fffffffffffff000000008000830244244e037f00000100080000ac1414aa00000001ffffffff000000207f000001000000040000"]}) 00:13:54 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'gre0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x740, 0x8020, 0x200, 0xfffffffa, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x66, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@noop]}}}}}) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x6, 0x2, 0x7, 0x4, 0xfffffffffffffff0}], &(0x7f0000000180)='GPL\x00', 0x1, 0xf6, &(0x7f00000001c0)=""/246, 0x41000, 0x1, '\x00', r1, 0x0, r0, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x5, 0xe18, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0, r0, r0, r0, r0, r2, r0], 0x0, 0x10, 0xfffffff9}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x11, r0, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @private, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r3, 0x4, 0x80, 0x7, 0x2, 0x6d824453c90b3970, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x1, 0x80, 0x6, 0x4}}) 00:13:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}]}}}}}) 00:13:54 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2}, 0x48) 00:13:54 executing program 2: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}]}}}}}) 00:13:54 executing program 3: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x10000000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x105200, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x4a, 0x0, r2}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 00:13:54 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x20, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x1080) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='ip_vti0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="800000800000000100000002491e006400680000088390780a010101a79074aa860492d444243f5164010102fffffff7ac1414aa00000003ac14ff7fffffffffffff000000008000830244244e037f00000100080000ac1414aa00000001ffffffff000000207f000001000000040000"]}) 00:13:54 executing program 3: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:54 executing program 1: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, 0xffffffffffffffff, 0x10000000) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x105200, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x4a, 0x0, r2}) (async, rerun: 32) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (rerun: 32) 00:13:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}]}}}}}) 00:13:54 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x20, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x1080) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r2, 0x20, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x1080) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) 00:13:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, 0xffffffffffffffff, 0x4, 0x2}, 0x48) 00:13:54 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x22000000, 0x2000}) 00:13:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}]}}}}}) 00:13:54 executing program 0: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:54 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) 00:13:54 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$bt_sco(r1, &(0x7f00000001c0)={0x1f, @fixed}, 0x8) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000200)={"1023792a5c064cc4e39d089dc3a00fe9bc4336f1467e22174102bc9d445d", 0x3ff, 0x2, 0x0, 0x0, 0x3, 0x0, 0x9, 0x2, [0xf003, 0x200, 0xffffffff, 0xcfdd, 0x7, 0x88, 0x36c3, 0x2, 0x5, 0x1b, 0x7f0d, 0x8, 0x40, 0x81, 0x4, 0x10001, 0x4, 0xa4]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$bt_sco(r3, &(0x7f00000001c0)={0x1f, @fixed}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xb3, 0x0, r1, 0xde, '\x00', r2, r3, 0x0, 0x2, 0x5}, 0x48) 00:13:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}) 00:13:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="000127bd7000fedbdf250100000030000180080009003100000014000300000000000000000000000000000000000800080009000000060004004e2200004400018014000300fe8000000000000000000000000000aa0600020087000000090006006c626c6300000000070006006c630000080009003c000000060004004e20000008000400ff0f00002400018006000100020000000600020001000000060002003300000007000600727200000c000380080003000100000014000180060002002f000000060002000000000008000400020000000800050006000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8000000}, 0x2000c8c6) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x6c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x477}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x844) 00:13:54 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2002}) 00:13:54 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x0, 0x2}, 0x48) 00:13:54 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) 00:13:54 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$bt_sco(r1, &(0x7f00000001c0)={0x1f, @fixed}, 0x8) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000200)={"1023792a5c064cc4e39d089dc3a00fe9bc4336f1467e22174102bc9d445d", 0x3ff, 0x2, 0x0, 0x0, 0x3, 0x0, 0x9, 0x2, [0xf003, 0x200, 0xffffffff, 0xcfdd, 0x7, 0x88, 0x36c3, 0x2, 0x5, 0x1b, 0x7f0d, 0x8, 0x40, 0x81, 0x4, 0x10001, 0x4, 0xa4]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$bt_sco(r3, &(0x7f00000001c0)={0x1f, @fixed}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xb3, 0x0, r1, 0xde, '\x00', r2, r3, 0x0, 0x2, 0x5}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) connect$bt_sco(r1, &(0x7f00000001c0)={0x1f, @fixed}, 0x8) (async) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000200)={"1023792a5c064cc4e39d089dc3a00fe9bc4336f1467e22174102bc9d445d", 0x3ff, 0x2, 0x0, 0x0, 0x3, 0x0, 0x9, 0x2, [0xf003, 0x200, 0xffffffff, 0xcfdd, 0x7, 0x88, 0x36c3, 0x2, 0x5, 0x1b, 0x7f0d, 0x8, 0x40, 0x81, 0x4, 0x10001, 0x4, 0xa4]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) connect$bt_sco(r3, &(0x7f00000001c0)={0x1f, @fixed}, 0x8) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xb3, 0x0, r1, 0xde, '\x00', r2, r3, 0x0, 0x2, 0x5}, 0x48) (async) 00:13:54 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:54 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair(0x23, 0x1, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8, 0x8, 0x2, 0x8, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x65, 0x0, 0x5, 0x0, 0x0, @local, @broadcast, {[@lsrr={0x83, 0x13, 0xdd, [@rand_addr=0x64010101, @multicast1, @broadcast, @multicast2]}, @end, @timestamp={0x44, 0x18, 0x6f, 0x0, 0x7, [0xac, 0x940000, 0x3, 0x7, 0x6]}, @cipso={0x86, 0x69, 0x3, [{0x1, 0x12, "58e2a1a3f2bdc2d439bb66ecf58ec78b"}, {0x2, 0xd, "3b189260b4580fc9e65d98"}, {0x7, 0x11, "8046b3bc1d617be4ac4a8e24059e93"}, {0x5, 0x11, "023c1a2f17e9a2993b8657f85407e9"}, {0x6, 0xe, "903dc4d103526b46dd2d5a72"}, {0x2, 0x2}, {0x1, 0x12, "b78c177f74b7b8b898e755f06974a0d1"}]}, @ra={0x94, 0x4}, @generic={0x94, 0x9, "4da3a01a5b06f2"}]}}}}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e993000041921edd000000000100000bc5110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000dd5b8000fcffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x51, &(0x7f00000000c0)=""/81, 0x40f00, 0x20, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x12f76, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=[{0x3, 0x5, 0x3, 0x1}, {0x4, 0x1, 0x3}, {0x4, 0x4, 0xd, 0x6}, {0x4, 0x5, 0x6, 0x7}, {0x4, 0x1, 0xf, 0xa}, {0x4, 0x2, 0x5}, {0x2, 0x5, 0x4, 0x5}, {0x0, 0x2, 0x5, 0x3}], 0x10, 0x5}, 0x90) 00:13:54 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2002}) 00:13:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="96d1341eb84eed9dd344795c6e56c389365b2f79145b09ae8ff0f31dc95b24ca572ef87b67ca62b5a122e13d891548a3e7ad99df82ea8b4de3a3f31030920ca96a9a559b63f7a0cccd90f80493069a48a05dd6b1eaee651f426bf9b8a7b44809a2d3d02d799e6c514b9a093f91d4ba15f6f1027635e3f3fd47ec6645ea4165e2240d9fbff0a4526c4c3b94971bb32540c30bccc91e8cce13e1cd09a20cc4ff41eb91501ba7fb5b703ac4d8f6cd4574fb9ebb089dc6a84e970585234e68a9fd70f0883fdaeab2fd6649a2f62a84a823bdd0b509bae9eea134f9b350f6166174da4e3c47b305463136443fb63872a2985eb2a6dad8ad9af10c9f44dc91", @ANYRES16=r2, @ANYBLOB="000127bd7000fedbdf250100000030000180080009003100000014000300000000000000000000000000000000000800080009000000060004004e2200004400018014000300fe8000000000000000000000000000aa0600020087000000090006006c626c6300000000070006006c630000080009003c000000060004004e20000008000400ff0f00002400018006000100020000000600020001000000060002003300000007000600727200000c000380080003000100000014000180060002002f000000060002000000000008000400020000000800050006000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8000000}, 0x2000c8c6) socket$inet_udplite(0x2, 0x2, 0x88) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x6c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x477}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x844) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="000127bd7000fedbdf250100000030000180080009003100000014000300000000000000000000000000000000000800080009000000060004004e2200004400018014000300fe8000000000000000000000000000aa0600020087000000090006006c626c6300000000070006006c630000080009003c000000060004004e20000008000400ff0f00002400018006000100020000000600020001000000060002003300000007000600727200000c000380080003000100000014000180060002002f000000060002000000000008000400020000000800050006000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8000000}, 0x2000c8c6) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x6c, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x477}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x844) (async) 00:13:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0xaa7, 0x1f74, 0xafb7, 0x0, 0xffffffffffffffff, 0xffffff1d, '\x00', r3, 0xffffffffffffffff, 0x2, 0x1}, 0x48) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x58, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x49c0}, 0x40000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:54 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:54 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x0, 0x2}, 0x48) 00:13:54 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2002}) 00:13:54 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair(0x23, 0x1, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8, 0x8, 0x2, 0x8, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x65, 0x0, 0x5, 0x0, 0x0, @local, @broadcast, {[@lsrr={0x83, 0x13, 0xdd, [@rand_addr=0x64010101, @multicast1, @broadcast, @multicast2]}, @end, @timestamp={0x44, 0x18, 0x6f, 0x0, 0x7, [0xac, 0x940000, 0x3, 0x7, 0x6]}, @cipso={0x86, 0x69, 0x3, [{0x1, 0x12, "58e2a1a3f2bdc2d439bb66ecf58ec78b"}, {0x2, 0xd, "3b189260b4580fc9e65d98"}, {0x7, 0x11, "8046b3bc1d617be4ac4a8e24059e93"}, {0x5, 0x11, "023c1a2f17e9a2993b8657f85407e9"}, {0x6, 0xe, "903dc4d103526b46dd2d5a72"}, {0x2, 0x2}, {0x1, 0x12, "b78c177f74b7b8b898e755f06974a0d1"}]}, @ra={0x94, 0x4}, @generic={0x94, 0x9, "4da3a01a5b06f2"}]}}}}}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e993000041921edd000000000100000bc5110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000dd5b8000fcffffffbf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x51, &(0x7f00000000c0)=""/81, 0x40f00, 0x20, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x12f76, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=[{0x3, 0x5, 0x3, 0x1}, {0x4, 0x1, 0x3}, {0x4, 0x4, 0xd, 0x6}, {0x4, 0x5, 0x6, 0x7}, {0x4, 0x1, 0xf, 0xa}, {0x4, 0x2, 0x5}, {0x2, 0x5, 0x4, 0x5}, {0x0, 0x2, 0x5, 0x3}], 0x10, 0x5}, 0x90) 00:13:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2ff0000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000200)=@ringbuf, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x40, 0x40, 0xfffffffb, 0x5, {{0x15, 0x4, 0x1, 0x1e, 0x54, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0xdc, 0x1, 0x1}, @ra={0x94, 0x4}, @generic={0x7, 0x8, "330c47bed658"}, @generic={0x7, 0x4, "de17"}, @generic={0x94, 0x10, "1c45ff5d6bb52977a3c6ad554438"}, @timestamp={0x44, 0x18, 0xf3, 0x0, 0xb, [0x6, 0x0, 0x200, 0x1, 0x4]}]}}}}}) 00:13:54 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0xaa7, 0x1f74, 0xafb7, 0x0, 0xffffffffffffffff, 0xffffff1d, '\x00', r3, 0xffffffffffffffff, 0x2, 0x1}, 0x48) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x58, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x49c0}, 0x40000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r4, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:54 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:54 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2002}) 00:13:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2ff0000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000200)=@ringbuf, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x40, 0x40, 0xfffffffb, 0x5, {{0x15, 0x4, 0x1, 0x1e, 0x54, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0xdc, 0x1, 0x1}, @ra={0x94, 0x4}, @generic={0x7, 0x8, "330c47bed658"}, @generic={0x7, 0x4, "de17"}, @generic={0x94, 0x10, "1c45ff5d6bb52977a3c6ad554438"}, @timestamp={0x44, 0x18, 0xf3, 0x0, 0xb, [0x6, 0x0, 0x200, 0x1, 0x4]}]}}}}}) 00:13:54 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2ff0000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000200)=@ringbuf, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x40, 0x40, 0xfffffffb, 0x5, {{0x15, 0x4, 0x1, 0x1e, 0x54, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0xdc, 0x1, 0x1}, @ra={0x94, 0x4}, @generic={0x7, 0x8, "330c47bed658"}, @generic={0x7, 0x4, "de17"}, @generic={0x94, 0x10, "1c45ff5d6bb52977a3c6ad554438"}, @timestamp={0x44, 0x18, 0xf3, 0x0, 0xb, [0x6, 0x0, 0x200, 0x1, 0x4]}]}}}}}) socket$inet_udplite(0x2, 0x2, 0x88) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2ff0000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000200)=@ringbuf, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x40, 0x40, 0xfffffffb, 0x5, {{0x15, 0x4, 0x1, 0x1e, 0x54, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0xdc, 0x1, 0x1}, @ra={0x94, 0x4}, @generic={0x7, 0x8, "330c47bed658"}, @generic={0x7, 0x4, "de17"}, @generic={0x94, 0x10, "1c45ff5d6bb52977a3c6ad554438"}, @timestamp={0x44, 0x18, 0xf3, 0x0, 0xb, [0x6, 0x0, 0x200, 0x1, 0x4]}]}}}}}) (async) 00:13:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x0, 0x2}, 0x48) 00:13:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 00:13:55 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2002}) 00:13:55 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 00:13:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2ff0000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000200)=@ringbuf, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x40, 0x40, 0xfffffffb, 0x5, {{0x15, 0x4, 0x1, 0x1e, 0x54, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0xdc, 0x1, 0x1}, @ra={0x94, 0x4}, @generic={0x7, 0x8, "330c47bed658"}, @generic={0x7, 0x4, "de17"}, @generic={0x94, 0x10, "1c45ff5d6bb52977a3c6ad554438"}, @timestamp={0x44, 0x18, 0xf3, 0x0, 0xb, [0x6, 0x0, 0x200, 0x1, 0x4]}]}}}}}) 00:13:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x100, 0x7fffffff, {{0x1a, 0x4, 0x3, 0x3, 0x68, 0x68, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @cipso={0x86, 0x47, 0x1, [{0x4, 0x8, "5da639a1bc1b"}, {0x1, 0x5, "b2c424"}, {0x7, 0xe, "5be1c4b48afe911f5f7b5a94"}, {0x6, 0xa, "be94c86f59b0956e"}, {0x0, 0xf, "6044b847377ea94a5e729a5c9b"}, {0x0, 0xd, "4490133ed409880dd30789"}]}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='si\x00\a', @ANYRES32=r2, @ANYBLOB="0700800000006c310001000141d400440067000004299078ac1414bbac1e010194046182ebb2108c35441ca5f3ffffffff000100000a010101000000037f000001000000800000000000006bcfa9faeb0a38cfc548f84b0000000000"]}) 00:13:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 00:13:55 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2002}) 00:13:55 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r1 = socket(0x2, 0x3, 0x8) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000080)=@default) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc880}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_setup(0x643c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x2, 0x0, 0x0, r3}) 00:13:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2ff0000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000200)=@ringbuf, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', r2, 0x40, 0x40, 0xfffffffb, 0x5, {{0x15, 0x4, 0x1, 0x1e, 0x54, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast1, @broadcast, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0xdc, 0x1, 0x1}, @ra={0x94, 0x4}, @generic={0x7, 0x8, "330c47bed658"}, @generic={0x7, 0x4, "de17"}, @generic={0x94, 0x10, "1c45ff5d6bb52977a3c6ad554438"}, @timestamp={0x44, 0x18, 0xf3, 0x0, 0xb, [0x6, 0x0, 0x200, 0x1, 0x4]}]}}}}}) 00:13:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x100, 0x7fffffff, {{0x1a, 0x4, 0x3, 0x3, 0x68, 0x68, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @cipso={0x86, 0x47, 0x1, [{0x4, 0x8, "5da639a1bc1b"}, {0x1, 0x5, "b2c424"}, {0x7, 0xe, "5be1c4b48afe911f5f7b5a94"}, {0x6, 0xa, "be94c86f59b0956e"}, {0x0, 0xf, "6044b847377ea94a5e729a5c9b"}, {0x0, 0xd, "4490133ed409880dd30789"}]}, @noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='si\x00\a', @ANYRES32=r2, @ANYBLOB="0700800000006c310001000141d400440067000004299078ac1414bbac1e010194046182ebb2108c35441ca5f3ffffffff000100000a010101000000037f000001000000800000000000006bcfa9faeb0a38cfc548f84b0000000000"]}) 00:13:55 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 00:13:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) 00:13:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x4}, 0x48) 00:13:55 executing program 2: io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2002}) 00:13:55 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2ff0000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) 00:13:55 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x4020940d, 0x0) socketpair(0xa, 0x800, 0x400, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c5) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0xd880, 0xffffffab}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x77, 0x0, 0x1, 0xfffff801, '\x00', r0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000000314e6a2d184c62c25a840e53c08f72ee65ebeed807e5ecc2dd88a7f3faac7fab3a86b49bc81c4230c3ac31897260570d6044ead762f2e4a83cc51688b57229b4ac3e26f26cd909c13f1aa9f0dce38a6ac069ee", @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf251100000008000300", @ANYRES32=r5, @ANYBLOB="05002e0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf0, r6, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xe36b7d19e9c4e029}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x1) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x10200, 0x0) ioctl$SNDCTL_SYNTH_INFO(r7, 0xc08c5102, &(0x7f0000000140)={"6c7ef14911dfe72bad47be91ce5910925e553f36af1c5955dd051784f292", 0x2, 0x0, 0x1, 0x7ff, 0x6bb37089, 0x0, 0x8, 0x0, [0x9, 0x0, 0x0, 0x401, 0x40, 0x7, 0x4, 0x1, 0x58c, 0x3, 0x0, 0xffffff7c, 0x5, 0x7, 0x5, 0xfffffff7, 0x1, 0xd8, 0x5]}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x711001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000780)={0x426, @tick=0x10000, 0x0, {0x7, 0x1f}, 0xbf, 0x0, 0x8}) 00:13:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 00:13:55 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x4}, 0x48) 00:13:55 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2300, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000040)=0x9) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@generic={0x82}) 00:13:55 executing program 0: io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x2002}) 00:13:55 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2ff0000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:55 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x4020940d, 0x0) socketpair(0xa, 0x800, 0x400, &(0x7f0000000580)) (async) socketpair(0xa, 0x800, 0x400, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c5) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0xd880, 0xffffffab}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x77, 0x0, 0x1, 0xfffff801, '\x00', r0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="00000000314e6a2d184c62c25a840e53c08f72ee65ebeed807e5ecc2dd88a7f3faac7fab3a86b49bc81c4230c3ac31897260570d6044ead762f2e4a83cc51688b57229b4ac3e26f26cd909c13f1aa9f0dce38a6ac069ee", @ANYRES16=r4, @ANYBLOB="000125bd7000fbdbdf251100000008000300", @ANYRES32=r5, @ANYBLOB="05002e0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf0, r6, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xe36b7d19e9c4e029}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xf0, r6, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3f}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xe36b7d19e9c4e029}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x10200, 0x0) (async) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x10200, 0x0) ioctl$SNDCTL_SYNTH_INFO(r7, 0xc08c5102, &(0x7f0000000140)={"6c7ef14911dfe72bad47be91ce5910925e553f36af1c5955dd051784f292", 0x2, 0x0, 0x1, 0x7ff, 0x6bb37089, 0x0, 0x8, 0x0, [0x9, 0x0, 0x0, 0x401, 0x40, 0x7, 0x4, 0x1, 0x58c, 0x3, 0x0, 0xffffff7c, 0x5, 0x7, 0x5, 0xfffffff7, 0x1, 0xd8, 0x5]}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x711001) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000780)={0x426, @tick=0x10000, 0x0, {0x7, 0x1f}, 0xbf, 0x0, 0x8}) 00:13:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 00:13:55 executing program 2: io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x2002}) 00:13:55 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2300, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000040)=0x9) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@generic={0x82}) 00:13:55 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x4}, 0x48) 00:13:55 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2ff0000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:55 executing program 0: io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0x0, 0x2002}) 00:13:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 00:13:55 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0xc0189436, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r1, r3, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x4030582a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x5452, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x1, 0xffffffff, 0x20, 0x31, r3, 0x0, '\x00', r1, r3, 0x0, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r8, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000700)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x0, 0x0, 0x3, 0x0, 0x80, 0x8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xac52, 0x0, 0x0, 0x0, 0x2ab}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd91a}}], &(0x7f0000000800)='syzkaller\x00', 0x800, 0xb0, &(0x7f0000000840)=""/176, 0x40f00, 0x81, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000900)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x6, 0xfffff000, 0x2}, 0x10, 0x1c958, r5, 0x3, &(0x7f0000000ac0)=[r4, r5, r9, r3, r0, r8, r5, r10], &(0x7f0000000b00)=[{0x0, 0x3, 0x4, 0x4}, {0x2, 0x2, 0x9, 0x9}, {0x2, 0x4, 0xc, 0x9}], 0x10, 0x6524}, 0x90) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xe, &(0x7f00000000c0)=@raw=[@alu={0x7, 0x0, 0x2, 0x0, 0xb, 0x8, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x0, 0x5, 0x0, 0x8000, 0x7f5b}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func], &(0x7f0000000140)='syzkaller\x00', 0x0, 0xb3, &(0x7f0000000180)=""/179, 0x41100, 0x2c, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r5, r6, r7, r8, r11], &(0x7f0000000540)=[{0x5, 0x3, 0x3, 0x6}, {0x2, 0x3, 0x3, 0x7}, {0x1, 0x2, 0xf, 0x8}, {0x1, 0x4, 0xb}, {0x4, 0x1, 0xa, 0x6}, {0x2, 0x2, 0x4, 0x1}, {0x5, 0x5, 0xe, 0x7}, {0x2, 0x5, 0x6}, {0x3, 0x5, 0xa, 0x9}, {0x0, 0x2, 0xb, 0x7}], 0x10, 0xfffffffe}, 0x90) 00:13:55 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x1, "87bcb1af85a685daf6d04811f63f5848725132de44ed1dfb66cbb6ec5ae08f66", 0x100, 0x1, 0x400, 0x10, 0x3}) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x0, @name="29910baa973f7f4bc7b3beaae4a459a8018d8be0dbb0ac8f1ef1875c9679eecb"}, 0x8, 0x7, 0xfff}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x795a, 0x100, 0x1, 0x2, 0x1, 0x3, 0x3, 0x3, 0x7ff, 0x7, 0x0, 0x79e3, 0x9, 0x7, 0xe, 0x1, {0x4, 0x9}, 0x4, 0x8b}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8480, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000200)={"d74f535006db875c5c54939cd562fb4dd1945f04c01275b5d196bfa1fbb5", 0x75, 0x0, 0x802, 0x3, 0x4, 0x4, 0x0, 0x4, [0x7, 0x2, 0x0, 0x9, 0x10000, 0x10000, 0x400, 0x0, 0x6, 0x3, 0x3, 0x1351, 0x4, 0x8, 0x3f, 0x8, 0xffffffff, 0x7, 0x582]}) 00:13:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2ff0000000000"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:55 executing program 4: io_uring_setup(0x641c, 0x0) 00:13:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x46, 0x4, 0x0, 0x0, 0x118, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}, @timestamp_prespec={0x44, 0x34, 0xb5, 0x3, 0xb, [{@multicast1, 0x80000001}, {@rand_addr=0x64010101, 0x7}, {@broadcast}, {@private=0xa010100, 0x3}, {@rand_addr=0x64010101, 0x5}, {@empty, 0x4}]}]}}}}}) 00:13:55 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0xc0189436, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x4, '\x00', r1, r3, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x4030582a, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x5452, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x1, 0xffffffff, 0x20, 0x31, r3, 0x0, '\x00', r1, r3, 0x0, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r8, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%ps \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000700)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x0, 0x0, 0x3, 0x0, 0x80, 0x8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xac52, 0x0, 0x0, 0x0, 0x2ab}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd91a}}], &(0x7f0000000800)='syzkaller\x00', 0x800, 0xb0, &(0x7f0000000840)=""/176, 0x40f00, 0x81, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000900)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x6, 0xfffff000, 0x2}, 0x10, 0x1c958, r5, 0x3, &(0x7f0000000ac0)=[r4, r5, r9, r3, r0, r8, r5, r10], &(0x7f0000000b00)=[{0x0, 0x3, 0x4, 0x4}, {0x2, 0x2, 0x9, 0x9}, {0x2, 0x4, 0xc, 0x9}], 0x10, 0x6524}, 0x90) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xe, &(0x7f00000000c0)=@raw=[@alu={0x7, 0x0, 0x2, 0x0, 0xb, 0x8, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x0, 0x5, 0x0, 0x8000, 0x7f5b}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func], &(0x7f0000000140)='syzkaller\x00', 0x0, 0xb3, &(0x7f0000000180)=""/179, 0x41100, 0x2c, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r5, r6, r7, r8, r11], &(0x7f0000000540)=[{0x5, 0x3, 0x3, 0x6}, {0x2, 0x3, 0x3, 0x7}, {0x1, 0x2, 0xf, 0x8}, {0x1, 0x4, 0xb}, {0x4, 0x1, 0xa, 0x6}, {0x2, 0x2, 0x4, 0x1}, {0x5, 0x5, 0xe, 0x7}, {0x2, 0x5, 0x6}, {0x3, 0x5, 0xa, 0x9}, {0x0, 0x2, 0xb, 0x7}], 0x10, 0xfffffffe}, 0x90) 00:13:55 executing program 1: r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000080)={0x1, "87bcb1af85a685daf6d04811f63f5848725132de44ed1dfb66cbb6ec5ae08f66", 0x100, 0x1, 0x400, 0x10, 0x3}) (async) ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000040)={{0x0, @name="29910baa973f7f4bc7b3beaae4a459a8018d8be0dbb0ac8f1ef1875c9679eecb"}, 0x8, 0x7, 0xfff}) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x795a, 0x100, 0x1, 0x2, 0x1, 0x3, 0x3, 0x3, 0x7ff, 0x7, 0x0, 0x79e3, 0x9, 0x7, 0xe, 0x1, {0x4, 0x9}, 0x4, 0x8b}}) (async) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0xc8480, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000200)={"d74f535006db875c5c54939cd562fb4dd1945f04c01275b5d196bfa1fbb5", 0x75, 0x0, 0x802, 0x3, 0x4, 0x4, 0x0, 0x4, [0x7, 0x2, 0x0, 0x9, 0x10000, 0x10000, 0x400, 0x0, 0x6, 0x3, 0x3, 0x1351, 0x4, 0x8, 0x3f, 0x8, 0xffffffff, 0x7, 0x582]}) 00:13:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x39, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}, @cipso={0x86, 0x2b, 0xffffffffffffffff, [{0x0, 0xc, "afd44b2d136dab067abd"}, {0x2, 0x11, "4cdab140c02622726163f6eec748e9"}, {0x6, 0x8, "5ae35869d142"}]}]}}}}}) 00:13:55 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) socket(0x2, 0x3, 0x8) (async) r1 = socket(0x2, 0x3, 0x8) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000080)=@default) (async) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000080)=@default) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc880}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc880}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_setup(0x643c, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x2, 0x0, 0x0, r3}) 00:13:55 executing program 4: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 00:13:55 executing program 3: io_uring_setup(0x641c, 0x0) 00:13:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}, @rr={0x7, 0x27, 0xdb, [@rand_addr=0x64010100, @loopback, @rand_addr=0x64010100, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x23}]}]}}}}}) 00:13:55 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x401c5820, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@mmap={0x8, 0x8, 0x4, 0x10, 0x549b, {0x0, 0xea60}, {0x4, 0xc, 0x2, 0x2, 0x0, 0x40, "cf92d8ab"}, 0x4, 0x1, {}, 0x3ff, 0x0, r1}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 00:13:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="678a653000000000000000001b000000", @ANYRES32=r1, @ANYBLOB="008000200001000000000003446400500065000020029078ac1e00010a010102443c3721ac14141a7fffffffffffffff000007ff6401010200000001ac14140a000000010000000000000c667f000001000000007f0000010000289f"]}) 00:13:55 executing program 0: io_uring_setup(0x641c, 0x0) 00:13:55 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x2d}) 00:13:55 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 00:13:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}, @rr={0x7, 0xf, 0xb9, [@loopback, @private=0xa010100, @multicast1]}]}}}}}) 00:13:55 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x401c5820, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000000)=@mmap={0x8, 0x8, 0x4, 0x10, 0x549b, {0x0, 0xea60}, {0x4, 0xc, 0x2, 0x2, 0x0, 0x40, "cf92d8ab"}, 0x4, 0x1, {}, 0x3ff, 0x0, r1}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 00:13:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="678a653000000000000000001b000000", @ANYRES32=r1, @ANYBLOB="008000200001000000000003446400500065000020029078ac1e00010a010102443c3721ac14141a7fffffffffffffff000007ff6401010200000001ac14140a000000010000000000000c667f000001000000007f0000010000289f"]}) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="678a653000000000000000001b000000", @ANYRES32=r1, @ANYBLOB="008000200001000000000003446400500065000020029078ac1e00010a010102443c3721ac14141a7fffffffffffffff000007ff6401010200000001ac14140a000000010000000000000c667f000001000000007f0000010000289f"]}) (async) 00:13:55 executing program 4: io_uring_setup(0x641c, &(0x7f00000004c0)) 00:13:55 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x2d}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x2d}) (async) 00:13:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}, @timestamp={0x44, 0xc, 0xe, 0x0, 0xb, [0x9, 0x7]}]}}}}}) 00:13:55 executing program 3: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 00:13:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x9, 0x1000, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x20, 0x2, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r1, 0x8, 0x10, 0x80000000, 0x80000000, {{0x11, 0x4, 0x1, 0x5, 0x44, 0x64, 0x0, 0x5c, 0x2f, 0x0, @empty, @multicast2, {[@rr={0x7, 0x17, 0xe1, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0x30, [@rand_addr=0x64010101, @multicast1, @multicast1, @local, @multicast1]}]}}}}}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x7901ed33, '\x00', r2, r3, 0x0, 0x5, 0x5}, 0x48) 00:13:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}, @timestamp_addr={0x44, 0x4c, 0xab, 0x1, 0xb, [{@local, 0x6}, {@remote, 0x9}, {@local, 0x8}, {@rand_addr=0x64010101, 0x7fffffff}, {@multicast2, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0xba}, 0x5}, {@loopback, 0x1}, {@remote, 0x400}]}]}}}}}) 00:13:55 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2003}) 00:13:55 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2, 0x3, 0x8) r2 = accept4$rose(r1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', r3, 0x0, 0x1, 0x5a6, 0x63, {{0x2f, 0x4, 0x0, 0x15, 0xbc, 0x66, 0x0, 0x0, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x6d, 0x3, 0x3, [{@remote, 0x2}, {@broadcast, 0x2}, {@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x44, 0x4a, 0x1, 0x7, [{@remote, 0x8}, {@remote, 0x5}, {@private=0xa010101, 0x7f}, {@empty, 0x1}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x26}, {@private=0xa010100, 0x7}, {@local, 0x10001}]}, @timestamp_prespec={0x44, 0x1c, 0x7c, 0x3, 0x0, [{@loopback, 0xd745}, {@remote, 0x9}, {@multicast2}]}, @ssrr={0x89, 0x2b, 0x3a, [@empty, @rand_addr=0x64010101, @rand_addr=0x64010102, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pS \x00'}, 0x20) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x7, 0x8, 0x2, 0xffffff01, {{0x14, 0x4, 0x2, 0x2b, 0x50, 0x67, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x28, 0x14, 0x0, 0x2, [0x18, 0x8, 0x5, 0x5, 0x6, 0x1, 0x40, 0x6, 0x0]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x2}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xd3, 0x0, 0x2, [0xfd9]}]}}}}}) r10 = syz_io_uring_complete(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9f96}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, 0x0, 0x9, 0x87, &(0x7f0000000180)=""/135, 0x41000, 0x1, '\x00', r9, 0x17, r10, 0x8, &(0x7f0000000300)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2b9b2, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0x2, 0x4}, {0x1, 0x5, 0x5, 0x7}], 0x10, 0x1ff}, 0x90) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000009"], 0x40}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x60, r12, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x72}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0xc}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r8, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x18, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x1}, @ldst={0x1, 0x0, 0x3, 0x2, 0x2, 0x30, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x8, 0x0, 0xfce6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5, r6, r7, r8, 0x1], &(0x7f00000006c0)=[{0x0, 0x5, 0x1, 0x6}, {0x4, 0x3, 0x9}, {0x5, 0x2, 0xe, 0xb}, {0x2, 0x1, 0xa, 0x5}, {0x0, 0x2, 0x7, 0x4}, {0x1, 0x1, 0xf, 0xb}, {0x0, 0x5, 0xc, 0xf}], 0x10, 0x5}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xdeb}, [@jmp={0x5, 0x0, 0xd, 0x1, 0x0, 0x30, 0xfffffffffffffff0}]}, &(0x7f0000000440)='syzkaller\x00', 0xfffffffa, 0xc5, &(0x7f0000000480)=""/197, 0x40f00, 0x2, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2743a, 0xffffffffffffffff, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r13], &(0x7f0000000780)=[{0x1, 0x5, 0x9, 0x5}, {0x0, 0x1, 0x2, 0x7}, {0x0, 0x5, 0xf, 0x9}], 0x10, 0xfffffffa}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r15}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r15, @ANYBLOB="78008000760000060000006e491f0024006500001f0490786401ac9c13661d58d06501000101070733ac1e0101000000"]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r16, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r17}, 0x48) accept4$rose(r2, &(0x7f0000000380)=@full={0xb, @dev, @rose, 0x0, [@netrom, @null, @default, @null, @rose, @default]}, &(0x7f00000003c0)=0x40, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r17, @ANYBLOB="074800100000000200000003413200840066000004049078ac1414aa64010102890be8000000007f00000101443c1014bb00000008ac1414bb00000007e0000002000100017f00000100000008ac14141a000000ef7f0000010000000444083a400000010194040100940401008616000000030210cb1c7905bdaf8c74684c6eef12c800"/144]}) 00:13:55 executing program 2: io_uring_setup(0x641c, &(0x7f00000004c0)) 00:13:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x9, 0x1000, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x20, 0x2, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r1, 0x8, 0x10, 0x80000000, 0x80000000, {{0x11, 0x4, 0x1, 0x5, 0x44, 0x64, 0x0, 0x5c, 0x2f, 0x0, @empty, @multicast2, {[@rr={0x7, 0x17, 0xe1, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0x30, [@rand_addr=0x64010101, @multicast1, @multicast1, @local, @multicast1]}]}}}}}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x7901ed33, '\x00', r2, r3, 0x0, 0x5, 0x5}, 0x48) 00:13:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}, @generic={0x7, 0x3, '}'}]}}}}}) 00:13:55 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:55 executing program 3: io_uring_setup(0x641c, &(0x7f00000004c0)) 00:13:55 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x200}) [ 835.829208][ T4281] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 00:13:55 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x10000000) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) 00:13:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1, {[@generic={0x0, 0x11, "cdf1337bdc7042d887e30e351b68df"}]}}}}}) 00:13:55 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:55 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2004}) 00:13:55 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x10000000) (async, rerun: 64) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) (rerun: 64) 00:13:55 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x200}) 00:13:55 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}) 00:13:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2, 0x3, 0x8) r2 = accept4$rose(r1, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000240)={'ip_vti0\x00', r3, 0x0, 0x1, 0x5a6, 0x63, {{0x2f, 0x4, 0x0, 0x15, 0xbc, 0x66, 0x0, 0x0, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0x6d, 0x3, 0x3, [{@remote, 0x2}, {@broadcast, 0x2}, {@broadcast, 0x7}]}, @timestamp_addr={0x44, 0x44, 0x4a, 0x1, 0x7, [{@remote, 0x8}, {@remote, 0x5}, {@private=0xa010101, 0x7f}, {@empty, 0x1}, {@loopback, 0x7}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x26}, {@private=0xa010100, 0x7}, {@local, 0x10001}]}, @timestamp_prespec={0x44, 0x1c, 0x7c, 0x3, 0x0, [{@loopback, 0xd745}, {@remote, 0x9}, {@multicast2}]}, @ssrr={0x89, 0x2b, 0x3a, [@empty, @rand_addr=0x64010101, @rand_addr=0x64010102, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pS \x00'}, 0x20) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x7, 0x8, 0x2, 0xffffff01, {{0x14, 0x4, 0x2, 0x2b, 0x50, 0x67, 0x0, 0x6, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x28, 0x14, 0x0, 0x2, [0x18, 0x8, 0x5, 0x5, 0x6, 0x1, 0x40, 0x6, 0x0]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x2}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xd3, 0x0, 0x2, [0xfd9]}]}}}}}) (async) r10 = syz_io_uring_complete(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9f96}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, 0x0, 0x9, 0x87, &(0x7f0000000180)=""/135, 0x41000, 0x1, '\x00', r9, 0x17, r10, 0x8, &(0x7f0000000300)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2b9b2, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0x2, 0x4}, {0x1, 0x5, 0x5, 0x7}], 0x10, 0x1ff}, 0x90) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000009"], 0x40}}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x60, r12, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3e}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x72}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0xc}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)={0x1b, 0x0, 0x0, 0x80000000, 0x0, r8, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x18, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x1}, @ldst={0x1, 0x0, 0x3, 0x2, 0x2, 0x30, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x8, 0x0, 0xfce6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5, r6, r7, r8, 0x1], &(0x7f00000006c0)=[{0x0, 0x5, 0x1, 0x6}, {0x4, 0x3, 0x9}, {0x5, 0x2, 0xe, 0xb}, {0x2, 0x1, 0xa, 0x5}, {0x0, 0x2, 0x7, 0x4}, {0x1, 0x1, 0xf, 0xb}, {0x0, 0x5, 0xc, 0xf}], 0x10, 0x5}, 0x90) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xdeb}, [@jmp={0x5, 0x0, 0xd, 0x1, 0x0, 0x30, 0xfffffffffffffff0}]}, &(0x7f0000000440)='syzkaller\x00', 0xfffffffa, 0xc5, &(0x7f0000000480)=""/197, 0x40f00, 0x2, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2743a, 0xffffffffffffffff, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r13], &(0x7f0000000780)=[{0x1, 0x5, 0x9, 0x5}, {0x0, 0x1, 0x2, 0x7}, {0x0, 0x5, 0xf, 0x9}], 0x10, 0xfffffffa}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r15}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r15, @ANYBLOB="78008000760000060000006e491f0024006500001f0490786401ac9c13661d58d06501000101070733ac1e0101000000"]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r16, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r17}, 0x48) (async) accept4$rose(r2, &(0x7f0000000380)=@full={0xb, @dev, @rose, 0x0, [@netrom, @null, @default, @null, @rose, @default]}, &(0x7f00000003c0)=0x40, 0x80000) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r17, @ANYBLOB="074800100000000200000003413200840066000004049078ac1414aa64010102890be8000000007f00000101443c1014bb00000008ac1414bb00000007e0000002000100017f00000100000008ac14141a000000ef7f0000010000000444083a400000010194040100940401008616000000030210cb1c7905bdaf8c74684c6eef12c800"/144]}) 00:13:55 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:55 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) 00:13:55 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100000000fedbff2508003200"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x78, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0f71}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1088}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8d7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffeaa}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 00:13:55 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2007}) 00:13:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000811) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6c6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x34}}, 0x4800) [ 836.007044][ T6184] Bluetooth: hci2: command 0x0405 tx timeout 00:13:56 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100000000fedbff2508003200"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x78, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0f71}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1088}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8d7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffeaa}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="000100000000fedbff2508003200"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x78, r3, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff0f71}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1088}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8d7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffeaa}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) (async) 00:13:56 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) 00:13:56 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2008}) 00:13:56 executing program 0: ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000140)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="677265746370304efc9aa50000000000049802a4de5bf7712bc027a829e25a38768b28511a7da45646f93d42d8fd57199b42c2b485408b5bbda80d0cfe00e8c0e15ec2edfc6d521cf7c8d2bc30371867b24e5adc0adc28daa1e035a30105b63b04a035c3c33d6ee8ff84658b706f010ddf59", @ANYRES32=r1, @ANYBLOB="0040000000000003000000024319004c0066000080049078ac1414aae0000001070beeffffffffac1e000101440caf91ffffffff8000008000441c0970fffffff7000000090000000100000002fffeffff000007ff0000005370b7691ea18aed94b3420d7ae99929e4da4ee87d4cc7b1ac222565179f4273240be707567c29228f64af428cc6cc9cdbb9c39e6e543c07bae7a956334899309fe6c0e479089192816177109a2eb81a76f1e81fdad6258896b8b3a76b1e26404da98a270906c94afa3a72c570caf8337996a570b99c4a194b"]}) 00:13:56 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x34}}, 0x20000810) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd26}, 0x14}}, 0x90) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x85}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:13:56 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x200f}) 00:13:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:13:56 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0xffffff5f) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/62) 00:13:56 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) r1 = syz_io_uring_complete(0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x40305829, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000600)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @alu={0x7, 0x1, 0x6, 0xa, 0x8, 0xffffffffffffffe0, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @exit], &(0x7f00000006c0)='syzkaller\x00', 0xffff8001, 0x81, &(0x7f0000000700)=""/129, 0x41000, 0x3, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pK \x00'}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) accept4$rose(r11, 0x0, 0x0, 0x100800) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x33, '\x00', r0, 0xa, r1, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x1ff, 0x4}, 0x10, 0x0, r2, 0x3, &(0x7f00000004c0)=[r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, r7, r9, r10, r11], &(0x7f0000000500)=[{0x5, 0x5, 0xd}, {0x5, 0x2, 0xc, 0x9}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x3afa}, 0x90) 00:13:56 executing program 1: ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000140)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@local, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="677265746370304efc9aa50000000000049802a4de5bf7712bc027a829e25a38768b28511a7da45646f93d42d8fd57199b42c2b485408b5bbda80d0cfe00e8c0e15ec2edfc6d521cf7c8d2bc30371867b24e5adc0adc28daa1e035a30105b63b04a035c3c33d6ee8ff84658b706f010ddf59", @ANYRES32=r1, @ANYBLOB="0040000000000003000000024319004c0066000080049078ac1414aae0000001070beeffffffffac1e000101440caf91ffffffff8000008000441c0970fffffff7000000090000000100000002fffeffff000007ff0000005370b7691ea18aed94b3420d7ae99929e4da4ee87d4cc7b1ac222565179f4273240be707567c29228f64af428cc6cc9cdbb9c39e6e543c07bae7a956334899309fe6c0e479089192816177109a2eb81a76f1e81fdad6258896b8b3a76b1e26404da98a270906c94afa3a72c570caf8337996a570b99c4a194b"]}) ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000140)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@local}, &(0x7f0000000040)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="677265746370304efc9aa50000000000049802a4de5bf7712bc027a829e25a38768b28511a7da45646f93d42d8fd57199b42c2b485408b5bbda80d0cfe00e8c0e15ec2edfc6d521cf7c8d2bc30371867b24e5adc0adc28daa1e035a30105b63b04a035c3c33d6ee8ff84658b706f010ddf59", @ANYRES32=r1, @ANYBLOB="0040000000000003000000024319004c0066000080049078ac1414aae0000001070beeffffffffac1e000101440caf91ffffffff8000008000441c0970fffffff7000000090000000100000002fffeffff000007ff0000005370b7691ea18aed94b3420d7ae99929e4da4ee87d4cc7b1ac222565179f4273240be707567c29228f64af428cc6cc9cdbb9c39e6e543c07bae7a956334899309fe6c0e479089192816177109a2eb81a76f1e81fdad6258896b8b3a76b1e26404da98a270906c94afa3a72c570caf8337996a570b99c4a194b"]}) (async) 00:13:56 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 00:13:56 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2011}) 00:13:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x34}}, 0x20000810) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd26}, 0x14}}, 0x90) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x85}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x34}}, 0x20000810) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)={0x14, r4, 0x1, 0x70bd26}, 0x14}}, 0x90) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x85}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) (async) 00:13:56 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) r1 = syz_io_uring_complete(0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x40305829, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000600)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @alu={0x7, 0x1, 0x6, 0xa, 0x8, 0xffffffffffffffe0, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @exit], &(0x7f00000006c0)='syzkaller\x00', 0xffff8001, 0x81, &(0x7f0000000700)=""/129, 0x41000, 0x3, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pK \x00'}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) accept4$rose(r11, 0x0, 0x0, 0x100800) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x33, '\x00', r0, 0xa, r1, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x1ff, 0x4}, 0x10, 0x0, r2, 0x3, &(0x7f00000004c0)=[r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, r7, r9, r10, r11], &(0x7f0000000500)=[{0x5, 0x5, 0xd}, {0x5, 0x2, 0xc, 0x9}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x3afa}, 0x90) 00:13:56 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, &(0x7f00000000c0)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) r1 = syz_io_uring_complete(0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x40305829, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x40305829, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000600)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @alu={0x7, 0x1, 0x6, 0xa, 0x8, 0xffffffffffffffe0, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @exit], &(0x7f00000006c0)='syzkaller\x00', 0xffff8001, 0x81, &(0x7f0000000700)=""/129, 0x41000, 0x3, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pK \x00'}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r8) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) (async) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) accept4$rose(r11, 0x0, 0x0, 0x100800) (async) accept4$rose(r11, 0x0, 0x0, 0x100800) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x33, '\x00', r0, 0xa, r1, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x1ff, 0x4}, 0x10, 0x0, r2, 0x3, &(0x7f00000004c0)=[r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, r7, r9, r10, r11], &(0x7f0000000500)=[{0x5, 0x5, 0xd}, {0x5, 0x2, 0xc, 0x9}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x3afa}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x33, '\x00', r0, 0xa, r1, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x1ff, 0x4}, 0x10, 0x0, r2, 0x3, &(0x7f00000004c0)=[r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, r7, r9, r10, r11], &(0x7f0000000500)=[{0x5, 0x5, 0xd}, {0x5, 0x2, 0xc, 0x9}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x3afa}, 0x90) 00:13:56 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:56 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) 00:13:56 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:56 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2022}) 00:13:56 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) r1 = syz_io_uring_complete(0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x40305829, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000600)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @alu={0x7, 0x1, 0x6, 0xa, 0x8, 0xffffffffffffffe0, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @exit], &(0x7f00000006c0)='syzkaller\x00', 0xffff8001, 0x81, &(0x7f0000000700)=""/129, 0x41000, 0x3, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pK \x00'}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) accept4$rose(r11, 0x0, 0x0, 0x100800) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x33, '\x00', r0, 0xa, r1, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x1ff, 0x4}, 0x10, 0x0, r2, 0x3, &(0x7f00000004c0)=[r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, r7, r9, r10, r11], &(0x7f0000000500)=[{0x5, 0x5, 0xd}, {0x5, 0x2, 0xc, 0x9}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x3afa}, 0x90) 00:13:56 executing program 1: r0 = epoll_create1(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x10, 0x2004, @fd=r0, 0x6, &(0x7f0000000340)=[{&(0x7f0000000000)="caecc4b7bf7d3dcc4bed778ad9ce650595258ac772a71a09a768ff9458d4fd03d6298c7b5b2921e9a6bf0d015f77b00dc2ac756e62c1c124c7c8023efd96e6501fdb23e8d9af5d9169cc9d50bb81f4435fa82c1ebe909cf48a77a25cdc3109cf788bea189009c0954aa09bbcaf2b961a95b3c3ee89", 0x75}, {&(0x7f0000000080)="2c2a24dd0b3a5a676f86cd34813a91d03628c0768f4d22eaae483a63093d837e9ba0e758e286643697c0b65439583ee71224b8c02c0453da5e774df97f618e9ed1cda55c9e3341a33e561efbcdc8bf7d53192bf706a73633c4092cb5fab335ad1a3b5e5d538685ff4dd7183af47611ce1a0829e68fbda8af56432929fcd4d49c952eda09117f14364b2bcfa3dc2b34ee2205b6cec63e7ad002f654ef63c14dc55db42893542be7ce17ac8828185bb5f4f615175f339561613e416418bf39c6e3c88cbc8c15200bf2072823bc5e21db4c043ad964fbd039", 0xd7}, {&(0x7f0000000180)="b7b8c2b415dba122ede3a2769e1465a4d4c4a937f37ff05d66179a78c64ca6947e762cf1f2136907c7f59f98ac40b013dba133f554b26929858cf4f227d82e6dad375313eec3166c1db59905144208bbab0c62b79bea0fa2", 0x58}, {&(0x7f0000000200)="57424bdceeb53a3af536c31d4923ae7aef2e0d860e27dea0180a501d25", 0x1d}, {&(0x7f0000000240)="f4711d215ceb67bb5f772e3bdefcc6694485a46baeee40e5161dc22335ae32cdbafeaccc127f5203e9f67f001d36636e5b1f90d86e3a40ec5bfdcee9ae47489c0a20d4ccd997a547b1cc72128c848765a79be1554de4e94e3d636093b09b0f734caf81e743156213c7fc55f120ab416f93bef601aa079859b2182ade18753dbbaf3461d0cd4b6b5eea269006c5eb0b12b745047e6d0f7736008060c919acc6b1087c3339f06c476bc4419be7f0f1bfeb987b9d75330fd99f4eda98d37609276d4fa5", 0xc2}], 0x5}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r5, 0x2f, 0x80, 0x6, 0x6, 0x61, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x10, 0x8001, 0x80000000}}) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_ACCEPT={0xd, 0xc0, 0x0, r6, &(0x7f0000000500)=0x80, &(0x7f0000000540)=@can, 0x0, 0x0, 0x1}) 00:13:56 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x20000}) 00:13:56 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x40049409, 0x0) write$sndseq(r0, &(0x7f0000000100)=[{0x8, 0x9, 0x42, 0x2, @time={0xed}, {0x8, 0x9}, {0x2, 0x1f}, @note={0xa6, 0x40, 0x5, 0x4, 0x2}}, {0x9, 0xff, 0x40, 0x4, @tick, {0x6, 0x1f}, {0x1, 0x9}, @result={0x5, 0x80000000}}, {0x2, 0x1f, 0x80, 0x9, @tick=0x6, {0x2, 0x3f}, {0x5, 0xff}, @control={0x9, 0x8000, 0xf7ff8000}}, {0x20, 0x6, 0x2, 0x3, @tick=0x11, {0x6, 0x6}, {0xcf, 0x75}, @control={0x9, 0x1, 0x1}}, {0x4, 0x5, 0x20, 0x1, @tick=0xfffffffa, {0x2, 0x2}, {0x7, 0x8}, @quote={{0x2, 0x8}, 0x4000, &(0x7f00000000c0)={0x73, 0x99, 0x0, 0x3f, @tick=0xfff, {0x20, 0x6}, {0x3, 0x3}, @addr={0x9, 0x1}}}}, {0x9c, 0x8, 0x7, 0x3f, @tick=0x7, {0x0, 0x9}, {0x4, 0xff}, @result={0x3, 0x401}}, {0x1, 0x1, 0x7f, 0x75, @tick=0x31fa, {0xf5, 0x20}, {0x3a, 0x9c}, @time=@time={0x6, 0x80000001}}, {0x9, 0x0, 0x20, 0x81, @tick=0x3867, {0x5, 0x9d}, {0x4c, 0x80}, @result={0xb6a5, 0xffffffff}}, {0x50, 0x40, 0x5, 0x1, @tick=0x2, {0x7, 0x1}, {0x0, 0x80}, @result={0x0, 0x5}}], 0xfc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)={{0x20, 0xce}, {0x4, 0x1}, 0x0, 0x5, 0x4}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) 00:13:56 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:56 executing program 4: r0 = epoll_create1(0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x10010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x10, 0x2004, @fd=r0, 0x6, &(0x7f0000000340)=[{&(0x7f0000000000)="caecc4b7bf7d3dcc4bed778ad9ce650595258ac772a71a09a768ff9458d4fd03d6298c7b5b2921e9a6bf0d015f77b00dc2ac756e62c1c124c7c8023efd96e6501fdb23e8d9af5d9169cc9d50bb81f4435fa82c1ebe909cf48a77a25cdc3109cf788bea189009c0954aa09bbcaf2b961a95b3c3ee89", 0x75}, {&(0x7f0000000080)="2c2a24dd0b3a5a676f86cd34813a91d03628c0768f4d22eaae483a63093d837e9ba0e758e286643697c0b65439583ee71224b8c02c0453da5e774df97f618e9ed1cda55c9e3341a33e561efbcdc8bf7d53192bf706a73633c4092cb5fab335ad1a3b5e5d538685ff4dd7183af47611ce1a0829e68fbda8af56432929fcd4d49c952eda09117f14364b2bcfa3dc2b34ee2205b6cec63e7ad002f654ef63c14dc55db42893542be7ce17ac8828185bb5f4f615175f339561613e416418bf39c6e3c88cbc8c15200bf2072823bc5e21db4c043ad964fbd039", 0xd7}, {&(0x7f0000000180)="b7b8c2b415dba122ede3a2769e1465a4d4c4a937f37ff05d66179a78c64ca6947e762cf1f2136907c7f59f98ac40b013dba133f554b26929858cf4f227d82e6dad375313eec3166c1db59905144208bbab0c62b79bea0fa2", 0x58}, {&(0x7f0000000200)="57424bdceeb53a3af536c31d4923ae7aef2e0d860e27dea0180a501d25", 0x1d}, {&(0x7f0000000240)="f4711d215ceb67bb5f772e3bdefcc6694485a46baeee40e5161dc22335ae32cdbafeaccc127f5203e9f67f001d36636e5b1f90d86e3a40ec5bfdcee9ae47489c0a20d4ccd997a547b1cc72128c848765a79be1554de4e94e3d636093b09b0f734caf81e743156213c7fc55f120ab416f93bef601aa079859b2182ade18753dbbaf3461d0cd4b6b5eea269006c5eb0b12b745047e6d0f7736008060c919acc6b1087c3339f06c476bc4419be7f0f1bfeb987b9d75330fd99f4eda98d37609276d4fa5", 0xc2}], 0x5}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r5, 0x2f, 0x80, 0x6, 0x6, 0x61, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x10, 0x8001, 0x80000000}}) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_ACCEPT={0xd, 0xc0, 0x0, r6, &(0x7f0000000500)=0x80, &(0x7f0000000540)=@can, 0x0, 0x0, 0x1}) epoll_create1(0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x20010, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x10010, 0xffffffffffffffff, 0x10000000) (async) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x10, 0x2004, @fd=r0, 0x6, &(0x7f0000000340)=[{&(0x7f0000000000)="caecc4b7bf7d3dcc4bed778ad9ce650595258ac772a71a09a768ff9458d4fd03d6298c7b5b2921e9a6bf0d015f77b00dc2ac756e62c1c124c7c8023efd96e6501fdb23e8d9af5d9169cc9d50bb81f4435fa82c1ebe909cf48a77a25cdc3109cf788bea189009c0954aa09bbcaf2b961a95b3c3ee89", 0x75}, {&(0x7f0000000080)="2c2a24dd0b3a5a676f86cd34813a91d03628c0768f4d22eaae483a63093d837e9ba0e758e286643697c0b65439583ee71224b8c02c0453da5e774df97f618e9ed1cda55c9e3341a33e561efbcdc8bf7d53192bf706a73633c4092cb5fab335ad1a3b5e5d538685ff4dd7183af47611ce1a0829e68fbda8af56432929fcd4d49c952eda09117f14364b2bcfa3dc2b34ee2205b6cec63e7ad002f654ef63c14dc55db42893542be7ce17ac8828185bb5f4f615175f339561613e416418bf39c6e3c88cbc8c15200bf2072823bc5e21db4c043ad964fbd039", 0xd7}, {&(0x7f0000000180)="b7b8c2b415dba122ede3a2769e1465a4d4c4a937f37ff05d66179a78c64ca6947e762cf1f2136907c7f59f98ac40b013dba133f554b26929858cf4f227d82e6dad375313eec3166c1db59905144208bbab0c62b79bea0fa2", 0x58}, {&(0x7f0000000200)="57424bdceeb53a3af536c31d4923ae7aef2e0d860e27dea0180a501d25", 0x1d}, {&(0x7f0000000240)="f4711d215ceb67bb5f772e3bdefcc6694485a46baeee40e5161dc22335ae32cdbafeaccc127f5203e9f67f001d36636e5b1f90d86e3a40ec5bfdcee9ae47489c0a20d4ccd997a547b1cc72128c848765a79be1554de4e94e3d636093b09b0f734caf81e743156213c7fc55f120ab416f93bef601aa079859b2182ade18753dbbaf3461d0cd4b6b5eea269006c5eb0b12b745047e6d0f7736008060c919acc6b1087c3339f06c476bc4419be7f0f1bfeb987b9d75330fd99f4eda98d37609276d4fa5", 0xc2}], 0x5}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) getsockopt$inet_mreqn(r4, 0x0, 0x0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', r5, 0x2f, 0x80, 0x6, 0x6, 0x61, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x10, 0x8001, 0x80000000}}) (async) getsockopt$inet6_mreq(r3, 0x29, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_ACCEPT={0xd, 0xc0, 0x0, r6, &(0x7f0000000500)=0x80, &(0x7f0000000540)=@can, 0x0, 0x0, 0x1}) (async) 00:13:56 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x40049409, 0x0) write$sndseq(r0, &(0x7f0000000100)=[{0x8, 0x9, 0x42, 0x2, @time={0xed}, {0x8, 0x9}, {0x2, 0x1f}, @note={0xa6, 0x40, 0x5, 0x4, 0x2}}, {0x9, 0xff, 0x40, 0x4, @tick, {0x6, 0x1f}, {0x1, 0x9}, @result={0x5, 0x80000000}}, {0x2, 0x1f, 0x80, 0x9, @tick=0x6, {0x2, 0x3f}, {0x5, 0xff}, @control={0x9, 0x8000, 0xf7ff8000}}, {0x20, 0x6, 0x2, 0x3, @tick=0x11, {0x6, 0x6}, {0xcf, 0x75}, @control={0x9, 0x1, 0x1}}, {0x4, 0x5, 0x20, 0x1, @tick=0xfffffffa, {0x2, 0x2}, {0x7, 0x8}, @quote={{0x2, 0x8}, 0x4000, &(0x7f00000000c0)={0x73, 0x99, 0x0, 0x3f, @tick=0xfff, {0x20, 0x6}, {0x3, 0x3}, @addr={0x9, 0x1}}}}, {0x9c, 0x8, 0x7, 0x3f, @tick=0x7, {0x0, 0x9}, {0x4, 0xff}, @result={0x3, 0x401}}, {0x1, 0x1, 0x7f, 0x75, @tick=0x31fa, {0xf5, 0x20}, {0x3a, 0x9c}, @time=@time={0x6, 0x80000001}}, {0x9, 0x0, 0x20, 0x81, @tick=0x3867, {0x5, 0x9d}, {0x4c, 0x80}, @result={0xb6a5, 0xffffffff}}, {0x50, 0x40, 0x5, 0x1, @tick=0x2, {0x7, 0x1}, {0x0, 0x80}, @result={0x0, 0x5}}], 0xfc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)={{0x20, 0xce}, {0x4, 0x1}, 0x0, 0x5, 0x4}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) 00:13:56 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast2, 0x0}, &(0x7f00000000c0)=0x14) r1 = syz_io_uring_complete(0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r6, 0x40305829, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000600)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, @alu={0x7, 0x1, 0x6, 0xa, 0x8, 0xffffffffffffffe0, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @exit], &(0x7f00000006c0)='syzkaller\x00', 0xffff8001, 0x81, &(0x7f0000000700)=""/129, 0x41000, 0x3, '\x00', 0x0, 0x1b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%pK \x00'}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), r8) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x48) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) accept4$rose(r11, 0x0, 0x0, 0x100800) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@exit]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x33, '\x00', r0, 0xa, r1, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x9, 0x1ff, 0x4}, 0x10, 0x0, r2, 0x3, &(0x7f00000004c0)=[r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, r7, r9, r10, r11], &(0x7f0000000500)=[{0x5, 0x5, 0xd}, {0x5, 0x2, 0xc, 0x9}, {0x5, 0x5, 0x3, 0x6}], 0x10, 0x3afa}, 0x90) 00:13:56 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) 00:13:56 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:56 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}]}]}, 0x59}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r1, 0xb1c}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 00:13:56 executing program 2: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) r2 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:56 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0, @ANYBLOB="00070080000000040000000443f7008c0064000000299078ac1e0001ac1414aa862100000002000eb454ae5a959201758e2c03fb02035b0007710085486500036c4454d5010a01010000000000ac1414bb00000401e000000100010000ffffffff00000005e000000200007fffe0000002000000037f000001000100000a01010000000001ffffffff80000001e000000100000001000000"]}) r2 = syz_io_uring_complete(0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x4030582a, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x40305828, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x17, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf0000000}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @exit, @alu={0x4, 0x1, 0x9, 0xb, 0x7, 0x6}, @ldst={0x2, 0x2, 0x6, 0x3, 0xa, 0x80, 0x10}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000000180)='GPL\x00', 0xc57a, 0x10, &(0x7f00000001c0)=""/16, 0x100, 0x18, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[r3, r4, 0x1], &(0x7f0000000380)=[{0x3, 0x5, 0xe, 0x4}, {0x3, 0x5, 0xd, 0x4}, {0x3, 0x4, 0x10, 0xc}, {0x0, 0x3, 0x2}, {0x4, 0x2, 0x4, 0x6}, {0x2, 0x1, 0x9, 0xb}, {0x5, 0x1, 0xb}], 0x10, 0x1}, 0x90) 00:13:56 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, &(0x7f00000000c0)=0x14) syz_io_uring_complete(0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:56 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x100, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc92}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x24}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x40) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2}) 00:13:56 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='\x00', @ANYRES32=0x0, @ANYBLOB="00070080000000040000000443f7008c0064000000299078ac1e0001ac1414aa862100000002000eb454ae5a959201758e2c03fb02035b0007710085486500036c4454d5010a01010000000000ac1414bb00000401e000000100010000ffffffff00000005e000000200007fffe0000002000000037f000001000100000a01010000000001ffffffff80000001e000000100000001000000"]}) r2 = syz_io_uring_complete(0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x4030582a, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x40305828, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x17, &(0x7f00000000c0)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x8}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf0000000}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}}, @exit, @alu={0x4, 0x1, 0x9, 0xb, 0x7, 0x6}, @ldst={0x2, 0x2, 0x6, 0x3, 0xa, 0x80, 0x10}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f0000000180)='GPL\x00', 0xc57a, 0x10, &(0x7f00000001c0)=""/16, 0x100, 0x18, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[r3, r4, 0x1], &(0x7f0000000380)=[{0x3, 0x5, 0xe, 0x4}, {0x3, 0x5, 0xd, 0x4}, {0x3, 0x4, 0x10, 0xc}, {0x0, 0x3, 0x2}, {0x4, 0x2, 0x4, 0x6}, {0x2, 0x1, 0x9, 0xb}, {0x5, 0x1, 0xb}], 0x10, 0x1}, 0x90) 00:13:56 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, &(0x7f00000000c0)=0x14) syz_io_uring_complete(0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:56 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x2}) 00:13:56 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x100, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010102}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc92}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x24}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x2}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x40) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2}) 00:13:56 executing program 1: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) r2 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:56 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 3: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) r2 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:56 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, &(0x7f00000000c0)=0x14) syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:56 executing program 2: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) r2 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_complete(0x0) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote}, &(0x7f0000000440)=0x14) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) (async) socket(0x11, 0x2, 0x1cc) (async) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) 00:13:56 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0xaa7, 0x1f74, 0xafb7, 0x0, 0xffffffffffffffff, 0xffffff1d, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1}, 0x48) r2 = syz_io_uring_complete(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x8000, 0x3ff, 0x2, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x48) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x801c581f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x17, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10001}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x293}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x6c, &(0x7f00000001c0)=""/108, 0x41000, 0xc, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r3, r4, r5], &(0x7f0000000380)=[{0x4, 0x2, 0x2, 0xb}], 0x10, 0x6}, 0x90) 00:13:56 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x3}) 00:13:56 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast2}, &(0x7f00000000c0)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:56 executing program 3: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) r2 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:56 executing program 4: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) r2 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:56 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:56 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000040)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0xaa7, 0x1f74, 0xafb7, 0x0, 0xffffffffffffffff, 0xffffff1d, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1}, 0x48) r2 = syz_io_uring_complete(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x8000, 0x3ff, 0x2, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x48) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x801c581f, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x17, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10001}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x293}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x6c, &(0x7f00000001c0)=""/108, 0x41000, 0xc, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r3, r4, r5], &(0x7f0000000380)=[{0x4, 0x2, 0x2, 0xb}], 0x10, 0x6}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000040)=0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1e, 0xaa7, 0x1f74, 0xafb7, 0x0, 0xffffffffffffffff, 0xffffff1d, '\x00', r1, 0xffffffffffffffff, 0x2, 0x1}, 0x48) (async) syz_io_uring_complete(0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x8000, 0x3ff, 0x2, 0x80, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x48) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x801c581f, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x17, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10001}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x293}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x6c, &(0x7f00000001c0)=""/108, 0x41000, 0xc, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0x1, 0x4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r3, r4, r5], &(0x7f0000000380)=[{0x4, 0x2, 0x2, 0xb}], 0x10, 0x6}, 0x90) (async) 00:13:56 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x5450, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x8, &(0x7f0000000140)='syztnl2\x00'}, 0x30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0500000000000000000000054129008400650000ff299078ac1eda82ac141428831f780a010101ac14141c0001ac1e0001070b050a010101e0000001940400008641000000030188bfd3f3af9cf0060767d951090000006ac0bbf690dc00046bfd01112c3505bb9145d6b87d62953feeaa08070f22f66cfe16b1487480121aebe800"/144]}) 00:13:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:56 executing program 3: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) r2 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:56 executing program 0: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) r2 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:56 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 4: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) r2 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:56 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:13:56 executing program 2: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) r2 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:56 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x5450, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x8, &(0x7f0000000140)='syztnl2\x00'}, 0x30) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0500000000000000000000054129008400650000ff299078ac1eda82ac141428831f780a010101ac14141c0001ac1e0001070b050a010101e0000001940400008641000000030188bfd3f3af9cf0060767d951090000006ac0bbf690dc00046bfd01112c3505bb9145d6b87d62953feeaa08070f22f66cfe16b1487480121aebe800"/144]}) 00:13:56 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:13:56 executing program 4: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) socket(0x11, 0x2, 0x1cc) 00:13:56 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x5450, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r0, 0x0, 0x8, &(0x7f0000000140)='syztnl2\x00'}, 0x30) socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0500000000000000000000054129008400650000ff299078ac1eda82ac141428831f780a010101ac14141c0001ac1e0001070b050a010101e0000001940400008641000000030188bfd3f3af9cf0060767d951090000006ac0bbf690dc00046bfd01112c3505bb9145d6b87d62953feeaa08070f22f66cfe16b1487480121aebe800"/144]}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0500000000000000000000054129008400650000ff299078ac1eda82ac141428831f780a010101ac14141c0001ac1e0001070b050a010101e0000001940400008641000000030188bfd3f3af9cf0060767d951090000006ac0bbf690dc00046bfd01112c3505bb9145d6b87d62953feeaa08070f22f66cfe16b1487480121aebe800"/144]}) 00:13:56 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:56 executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:13:56 executing program 4: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:56 executing program 2: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) socket(0x11, 0x2, 0x1cc) 00:13:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:56 executing program 0: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:56 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:57 executing program 0: r0 = socket$inet6(0xa, 0x800, 0x414) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 00:13:57 executing program 4: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x4000010, r0, 0x10000000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'erspan0\x00', r2, 0x20, 0x40, 0x848, 0x1, {{0x1c, 0x4, 0x3, 0x23, 0x70, 0x65, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, {[@end, @timestamp={0x44, 0x8, 0xd7, 0x0, 0x8, [0x40]}, @timestamp_prespec={0x44, 0x14, 0x7a, 0x3, 0xb, [{@broadcast, 0x80}, {@remote, 0xffff}]}, @timestamp_addr={0x44, 0xc, 0xbc, 0x1, 0x7, [{@local, 0x5}]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x2}, {0x7, 0x12, "d82c778823990d0a338ed8b9b957ed77"}, {0x5, 0x11, "cd5f09961ae367625fc7c34a12b1ba"}, {0x7, 0x6, "15fcd3f8"}]}]}}}}}) 00:13:57 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:57 executing program 1: r0 = socket$inet6(0xa, 0x800, 0x414) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x414) (async) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) (async) 00:13:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xfffffff7, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 2: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x0}, &(0x7f0000000440)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x400, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x48) r2 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:57 executing program 0: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote}, &(0x7f0000000440)=0x14) socket(0x11, 0x2, 0x1cc) 00:13:57 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:57 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2, 0x1, 0x5, 0xacf, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x4, 0x7, 0xa}, 0x48) 00:13:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x7, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'erspan0\x00', r2, 0x20, 0x40, 0x848, 0x1, {{0x1c, 0x4, 0x3, 0x23, 0x70, 0x65, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, {[@end, @timestamp={0x44, 0x8, 0xd7, 0x0, 0x8, [0x40]}, @timestamp_prespec={0x44, 0x14, 0x7a, 0x3, 0xb, [{@broadcast, 0x80}, {@remote, 0xffff}]}, @timestamp_addr={0x44, 0xc, 0xbc, 0x1, 0x7, [{@local, 0x5}]}, @cipso={0x86, 0x31, 0x3, [{0x1, 0x2}, {0x7, 0x12, "d82c778823990d0a338ed8b9b957ed77"}, {0x5, 0x11, "cd5f09961ae367625fc7c34a12b1ba"}, {0x7, 0x6, "15fcd3f8"}]}]}}}}}) 00:13:57 executing program 1: r0 = syz_io_uring_complete(0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote}, &(0x7f0000000440)=0x14) r1 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:57 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:57 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2, 0x1, 0x5, 0xacf, 0x1, 0x5, '\x00', 0x0, r0, 0x0, 0x4, 0x7, 0xa}, 0x48) 00:13:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0xfffffffb, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 2: syz_io_uring_complete(0x0) r0 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x6, 0xffffffff, {{0x19, 0x4, 0x3, 0x3a, 0x64, 0x64, 0x0, 0x74, 0x2d, 0x0, @broadcast, @private=0xa010100, {[@timestamp={0x44, 0x8, 0xd4, 0x0, 0x3, [0x1000]}, @rr={0x7, 0x1f, 0xf6, [@multicast2, @rand_addr=0x64010100, @local, @broadcast, @multicast2, @local, @local]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x4d, [@dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010101, @multicast2, @remote, @remote]}, @timestamp={0x44, 0x8, 0x36, 0x0, 0x0, [0x1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'gre0\x00', r1, 0x7, 0x7, 0x1000, 0x1, {{0x1b, 0x4, 0x0, 0x3b, 0x6c, 0x68, 0x0, 0x5, 0x2f, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x27, 0x11, [@multicast2, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101, @local, @loopback, @empty]}, @ssrr={0x89, 0x13, 0x4, [@loopback, @empty, @rand_addr=0x64010102, @loopback]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x17, 0xbb, [@broadcast, @broadcast, @local, @loopback, @rand_addr=0x64010100]}, @noop]}}}}}) 00:13:57 executing program 4: syz_io_uring_complete(0x0) socket(0x11, 0x2, 0x1cc) 00:13:57 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:57 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0x0, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:57 executing program 4: r0 = socket(0x11, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:57 executing program 3: socket(0x11, 0x2, 0x1cc) 00:13:57 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:57 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x40, 0x7, 0x3f, {{0x32, 0x4, 0x1, 0x1, 0xc8, 0x66, 0x0, 0x1f, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0x42, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0xb, 0xb, [@loopback, @private=0xa010101]}, @ssrr={0x89, 0x2b, 0x7a, [@broadcast, @multicast2, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @rand_addr=0x64010102, @private=0xa010101, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x54, 0xc5, 0x1, 0x0, [{@remote, 0x6}, {@local, 0x80000001}, {@rand_addr=0x64010102, 0xfffffffe}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@private=0xa010101, 0x6}, {@multicast1, 0x7}, {@rand_addr=0x64010100, 0x2}, {@private=0xa010100, 0x6}, {@multicast1, 0x200}]}, @rr={0x7, 0x13, 0x1e, [@empty, @remote, @multicast2, @local]}, @timestamp={0x44, 0x8, 0xc6, 0x0, 0xa, [0xfff]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', r0, 0x40, 0x7, 0xa6c, 0xda, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x1c, 0x3f, 0x1, 0x2, [{@multicast2, 0x4}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe52}]}, @end]}}}}}) 00:13:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x6, 0xffffffff, {{0x19, 0x4, 0x3, 0x3a, 0x64, 0x64, 0x0, 0x74, 0x2d, 0x0, @broadcast, @private=0xa010100, {[@timestamp={0x44, 0x8, 0xd4, 0x0, 0x3, [0x1000]}, @rr={0x7, 0x1f, 0xf6, [@multicast2, @rand_addr=0x64010100, @local, @broadcast, @multicast2, @local, @local]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x4d, [@dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010101, @multicast2, @remote, @remote]}, @timestamp={0x44, 0x8, 0x36, 0x0, 0x0, [0x1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'gre0\x00', r1, 0x7, 0x7, 0x1000, 0x1, {{0x1b, 0x4, 0x0, 0x3b, 0x6c, 0x68, 0x0, 0x5, 0x2f, 0x0, @remote, @broadcast, {[@lsrr={0x83, 0x27, 0x11, [@multicast2, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010101, @local, @loopback, @empty]}, @ssrr={0x89, 0x13, 0x4, [@loopback, @empty, @rand_addr=0x64010102, @loopback]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x17, 0xbb, [@broadcast, @broadcast, @local, @loopback, @rand_addr=0x64010100]}, @noop]}}}}}) 00:13:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0x0, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:57 executing program 0: r0 = socket(0x0, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0x0, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0x0, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 4: socket(0x0, 0x2, 0x1cc) 00:13:57 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) 00:13:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x11, 0x40, 0x4, 0x7ff, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x68, 0x0, 0x3, 0x0, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x20, 0x52, 0x0, 0x9, [0xb2b, 0x9, 0x4, 0x3ff, 0x8, 0x6, 0xa5d]}, @lsrr={0x83, 0xb, 0x10, [@empty, @multicast2]}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x541b, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x93, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000180)=@raw=[@ldst={0x1, 0x3, 0x0, 0x7, 0x6, 0x4, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f00000001c0)='GPL\x00', 0x3, 0xb4, &(0x7f0000000200)=""/180, 0x40f00, 0x8, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0xb, 0x7, 0xc27c}, 0x10, 0x196a9, r4, 0xa, &(0x7f0000000600)=[r5, r6, r7, r8], &(0x7f0000000640)=[{0x0, 0x1, 0xe, 0x8}, {0x2, 0x2, 0xa, 0x3}, {0x3, 0x3, 0xe}, {0x3, 0x5, 0x9}, {0x5, 0x3, 0x0, 0xc}, {0x2, 0x1, 0x2, 0xa}, {0x3, 0x1, 0xe, 0x6}, {0x2, 0x3, 0x6, 0x2}, {0x0, 0x3, 0x0, 0x1}, {0x2, 0x1, 0x4}], 0x10, 0x5}, 0x90) 00:13:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0x0, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0xfffffffb, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 1: r0 = socket(0x0, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:57 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095e2"], &(0x7f0000000740)='syzkaller\x00'}, 0x90) 00:13:57 executing program 0: socket(0x0, 0x2, 0x1cc) 00:13:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0xfffffffb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0x0, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x11, 0x40, 0x4, 0x7ff, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x68, 0x0, 0x3, 0x0, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x20, 0x52, 0x0, 0x9, [0xb2b, 0x9, 0x4, 0x3ff, 0x8, 0x6, 0xa5d]}, @lsrr={0x83, 0xb, 0x10, [@empty, @multicast2]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x11, 0x40, 0x4, 0x7ff, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x68, 0x0, 0x3, 0x0, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x20, 0x52, 0x0, 0x9, [0xb2b, 0x9, 0x4, 0x3ff, 0x8, 0x6, 0xa5d]}, @lsrr={0x83, 0xb, 0x10, [@empty, @multicast2]}]}}}}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r4, 0x541b, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x93, '\x00', r1, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000180)=@raw=[@ldst={0x1, 0x3, 0x0, 0x7, 0x6, 0x4, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f00000001c0)='GPL\x00', 0x3, 0xb4, &(0x7f0000000200)=""/180, 0x40f00, 0x8, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0xb, 0x7, 0xc27c}, 0x10, 0x196a9, r4, 0xa, &(0x7f0000000600)=[r5, r6, r7, r8], &(0x7f0000000640)=[{0x0, 0x1, 0xe, 0x8}, {0x2, 0x2, 0xa, 0x3}, {0x3, 0x3, 0xe}, {0x3, 0x5, 0x9}, {0x5, 0x3, 0x0, 0xc}, {0x2, 0x1, 0x2, 0xa}, {0x3, 0x1, 0xe, 0x6}, {0x2, 0x3, 0x6, 0x2}, {0x0, 0x3, 0x0, 0x1}, {0x2, 0x1, 0x4}], 0x10, 0x5}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x6, &(0x7f0000000180)=@raw=[@ldst={0x1, 0x3, 0x0, 0x7, 0x6, 0x4, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f00000001c0)='GPL\x00', 0x3, 0xb4, &(0x7f0000000200)=""/180, 0x40f00, 0x8, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0xb, 0x7, 0xc27c}, 0x10, 0x196a9, r4, 0xa, &(0x7f0000000600)=[r5, r6, r7, r8], &(0x7f0000000640)=[{0x0, 0x1, 0xe, 0x8}, {0x2, 0x2, 0xa, 0x3}, {0x3, 0x3, 0xe}, {0x3, 0x5, 0x9}, {0x5, 0x3, 0x0, 0xc}, {0x2, 0x1, 0x2, 0xa}, {0x3, 0x1, 0xe, 0x6}, {0x2, 0x3, 0x6, 0x2}, {0x0, 0x3, 0x0, 0x1}, {0x2, 0x1, 0x4}], 0x10, 0x5}, 0x90) 00:13:57 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x7, 0x40, 0x7, 0x3f, {{0x32, 0x4, 0x1, 0x1, 0xc8, 0x66, 0x0, 0x1f, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0x42, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0xb, 0xb, [@loopback, @private=0xa010101]}, @ssrr={0x89, 0x2b, 0x7a, [@broadcast, @multicast2, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @rand_addr=0x64010102, @private=0xa010101, @remote, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x54, 0xc5, 0x1, 0x0, [{@remote, 0x6}, {@local, 0x80000001}, {@rand_addr=0x64010102, 0xfffffffe}, {@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@private=0xa010101, 0x6}, {@multicast1, 0x7}, {@rand_addr=0x64010100, 0x2}, {@private=0xa010100, 0x6}, {@multicast1, 0x200}]}, @rr={0x7, 0x13, 0x1e, [@empty, @remote, @multicast2, @local]}, @timestamp={0x44, 0x8, 0xc6, 0x0, 0xa, [0xfff]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', r0, 0x40, 0x7, 0xa6c, 0xda, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x1c, 0x3f, 0x1, 0x2, [{@multicast2, 0x4}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe52}]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', r0, 0x40, 0x7, 0xa6c, 0xda, {{0xd, 0x4, 0x0, 0x1, 0x34, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x1c, 0x3f, 0x1, 0x2, [{@multicast2, 0x4}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe52}]}, @end]}}}}}) 00:13:57 executing program 1: socket(0x0, 0x2, 0x1cc) 00:13:57 executing program 3: r0 = socket(0x0, 0x2, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0xfffffffb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 00:13:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0xc9, 0xfffff801, 0x35, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32=r1, @ANYBLOB="004000000000000400000000428a00480067000009299078ac1414bbac1414bb00442c1281e0000001fffffff7ac1414aa000010000000000000000005ac1e000100000005ac1414bb0000047094040000000000"]}) 00:13:57 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:13:57 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) 00:13:57 executing program 1: r0 = socket(0x11, 0x0, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:57 executing program 2: socket(0x11, 0x0, 0x1cc) 00:13:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0xc9, 0xfffff801, 0x35, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32=r1, @ANYBLOB="004000000000000400000000428a00480067000009299078ac1414bbac1414bb00442c1281e0000001fffffff7ac1414aa000010000000000000000005ac1e000100000005ac1414bb0000047094040000000000"]}) 00:13:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0xfffffffb}, 0x48) 00:13:57 executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:13:57 executing program 2: r0 = socket(0x11, 0x0, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:57 executing program 0: socket(0x11, 0x0, 0x1cc) 00:13:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0xc9, 0xfffff801, 0x35, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32=r1, @ANYBLOB="004000000000000400000000428a00480067000009299078ac1414bbac1414bb00442c1281e0000001fffffff7ac1414aa000010000000000000000005ac1e000100000005ac1414bb0000047094040000000000"]}) 00:13:57 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 00:13:57 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, 0x0, 0x0) (async) socket$inet6(0xa, 0x5, 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, 0x0) 00:13:57 executing program 2: socket(0x11, 0x0, 0x1cc) 00:13:57 executing program 4: r0 = socket(0x11, 0x0, 0x1cc) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0xc9, 0xfffff801, 0x35, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32=r1, @ANYBLOB="004000000000000400000000428a00480067000009299078ac1414bbac1414bb00442c1281e0000001fffffff7ac1414aa000010000000000000000005ac1e000100000005ac1414bb0000047094040000000000"]}) 00:13:57 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$bt_sco(r0, 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000000)={"619799ec44d38b598924e1ba8e5c8efb9b2e216108c8a4d415da114d472a", 0x8000, 0x2, 0x401, 0x0, 0x800, 0x100, 0x1, 0x2, [0x4, 0x5a1a, 0x3f, 0x7, 0xfffffff9, 0xfffffffd, 0x6af, 0xfffff1cd, 0x2, 0x8, 0x6, 0x4, 0x10000, 0x5d, 0x3f, 0x6, 0x3, 0x1f]}) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:57 executing program 3: socket(0x11, 0x2, 0x0) 00:13:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:57 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0xc9, 0xfffff801, 0x35, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32=r1, @ANYBLOB="004000000000000400000000428a00480067000009299078ac1414bbac1414bb00442c1281e0000001fffffff7ac1414aa000010000000000000000005ac1e000100000005ac1414bb0000047094040000000000"]}) 00:13:57 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x10000000) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@loopback}, &(0x7f0000000040)=0x14) 00:13:57 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$bt_sco(r0, 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000000)={"619799ec44d38b598924e1ba8e5c8efb9b2e216108c8a4d415da114d472a", 0x8000, 0x2, 0x401, 0x0, 0x800, 0x100, 0x1, 0x2, [0x4, 0x5a1a, 0x3f, 0x7, 0xfffffff9, 0xfffffffd, 0x6af, 0xfffff1cd, 0x2, 0x8, 0x6, 0x4, 0x10000, 0x5d, 0x3f, 0x6, 0x3, 0x1f]}) (async) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000000)={"619799ec44d38b598924e1ba8e5c8efb9b2e216108c8a4d415da114d472a", 0x8000, 0x2, 0x401, 0x0, 0x800, 0x100, 0x1, 0x2, [0x4, 0x5a1a, 0x3f, 0x7, 0xfffffff9, 0xfffffffd, 0x6af, 0xfffff1cd, 0x2, 0x8, 0x6, 0x4, 0x10000, 0x5d, 0x3f, 0x6, 0x3, 0x1f]}) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:57 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x0, 0x420, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:57 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, r0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1610}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xae71}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3441c215}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x38}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x574df172}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="34010000", @ANYRES16=r0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x4000810) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)={0x258, r0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffe5e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd9}, @TIPC_NLA_MON_REF={0xfffffffffffffff8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3371}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc2a}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff}}}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 00:13:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32, @ANYBLOB="004000000000000400000000428a00480067000009299078ac1414bbac1414bb00442c1281e0000001fffffff7ac1414aa000010000000000000000005ac1e000100000005ac1414bb0000047094040000000000"]}) 00:13:57 executing program 2: socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:58 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:58 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:58 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x100010, r0, 0x10000000) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000000)={@loopback}, &(0x7f0000000040)=0x14) 00:13:58 executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) 00:13:58 executing program 2: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32, @ANYBLOB="004000000000000400000000428a00480067000009299078ac1414bbac1414bb00442c1281e0000001fffffff7ac1414aa000010000000000000000005ac1e000100000005ac1414bb0000047094040000000000"]}) [ 838.086558][ T6184] Bluetooth: hci2: command 0x0405 tx timeout 00:13:58 executing program 0: socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) 00:13:58 executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x48) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) 00:13:58 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x78, r0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1610}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xae71}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3441c215}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x38}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x574df172}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="34010000", @ANYRES16=r0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x1}, 0x4000810) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)={0x258, r0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffe5e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd9}, @TIPC_NLA_MON_REF={0xfffffffffffffff8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3371}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc2a}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff}}}}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x4010}, 0x4) 00:13:58 executing program 1: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32, @ANYBLOB="004000000000000400000000428a00480067000009299078ac1414bbac1414bb00442c1281e0000001fffffff7ac1414aa000010000000000000000005ac1e000100000005ac1414bb0000047094040000000000"]}) 00:13:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdc000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040840) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 00:13:58 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="69f9f69023e2144d043caed111ed7276457a817ad9b6069ea620bc7140de422aa91e9fab1df756a1c79d4e660d5600ea4f717a612b6930e3ed253b5e18be8778cf59d8cd0549de8e63840328a05d776d30a9fde4a4d879aefb4ec16390b645de8c933a3cef4fd6ad1dd36e778329e7da7e822cbfaff66b23bd0f4a215215072eb6255367ea90450100"/152, @ANYRES16=r0, @ANYBLOB="0001000009855a56a1745f5dd11035c4de477b1d800000a31c00"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:58 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 00:13:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'gre0\x00', r2, 0x1, 0x1, 0x1000, 0x3, {{0x1c, 0x4, 0x1, 0x1f, 0x70, 0x67, 0x0, 0x9, 0x4, 0x0, @private=0x8000, @rand_addr=0x64010101, {[@noop, @timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0xc, [{@local, 0x3f}, {@broadcast, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010101, 0xa3a}]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x5, [0x7f, 0x258, 0xfffffc01]}, @noop, @timestamp_prespec={0x44, 0xc, 0x89, 0x3, 0x3, [{@private=0xa010101, 0x101}]}, @cipso={0x86, 0x17, 0x1, [{0x7, 0x5, "43fed8"}, {0x7, 0x2}, {0x1, 0x5, "2ec06d"}, {0x6, 0x5, "007a0e"}]}]}}}}}) 00:13:58 executing program 1: socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:58 executing program 2: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32, @ANYBLOB="004000000000000400000000428a00480067000009299078ac1414bbac1414bb00442c1281e0000001fffffff7ac1414aa000010000000000000000005ac1e000100000005ac1414bb0000047094040000000000"]}) 00:13:58 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xdc000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040840) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 00:13:58 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="69f9f69023e2144d043caed111ed7276457a817ad9b6069ea620bc7140de422aa91e9fab1df756a1c79d4e660d5600ea4f717a612b6930e3ed253b5e18be8778cf59d8cd0549de8e63840328a05d776d30a9fde4a4d879aefb4ec16390b645de8c933a3cef4fd6ad1dd36e778329e7da7e822cbfaff66b23bd0f4a215215072eb6255367ea90450100"/152, @ANYRES16=r0, @ANYBLOB="0001000009855a56a1745f5dd11035c4de477b1d800000a31c00"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:58 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6}, 0x48) 00:13:58 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32, @ANYBLOB="004000000000000400000000428a00480067000009299078ac1414bbac1414bb00442c1281e0000001fffffff7ac1414aa000010000000000000000005ac1e000100000005ac1414bb0000047094040000000000"]}) 00:13:58 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x181482, 0x0) write$sequencer(r0, &(0x7f0000000080)=[@v={0x93, 0x0, 0x90, 0x0, @MIDI_NOTEON=@special}], 0x8) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f00000000c0)=0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000100)=0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000001c0)={0xd2, 0x1, 0x4, 0x5, 0x7, 0x2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:13:58 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:58 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x4}) 00:13:58 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x20000080) 00:13:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x48) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'gre0\x00', r2, 0x1, 0x1, 0x1000, 0x3, {{0x1c, 0x4, 0x1, 0x1f, 0x70, 0x67, 0x0, 0x9, 0x4, 0x0, @private=0x8000, @rand_addr=0x64010101, {[@noop, @timestamp_addr={0x44, 0x24, 0xd1, 0x1, 0xc, [{@local, 0x3f}, {@broadcast, 0xfffffff9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010101, 0xa3a}]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x5, [0x7f, 0x258, 0xfffffc01]}, @noop, @timestamp_prespec={0x44, 0xc, 0x89, 0x3, 0x3, [{@private=0xa010101, 0x101}]}, @cipso={0x86, 0x17, 0x1, [{0x7, 0x5, "43fed8"}, {0x7, 0x2}, {0x1, 0x5, "2ec06d"}, {0x6, 0x5, "007a0e"}]}]}}}}}) 00:13:58 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32, @ANYBLOB="004000000000000400000000428a00480067000009299078ac1414bbac1414bb00442c1281e0000001fffffff7ac1414aa000010000000000000000005ac1e000100000005ac1414bb0000047094040000000000"]}) 00:13:58 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x7}) 00:13:58 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x181482, 0x0) write$sequencer(r0, &(0x7f0000000080)=[@v={0x93, 0x0, 0x90, 0x0, @MIDI_NOTEON=@special}], 0x8) (async) write$sequencer(r0, &(0x7f0000000080)=[@v={0x93, 0x0, 0x90, 0x0, @MIDI_NOTEON=@special}], 0x8) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f00000000c0)=0x1) (async) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f00000000c0)=0x1) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000100)=0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000001c0)={0xd2, 0x1, 0x4, 0x5, 0x7, 0x2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 00:13:58 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:58 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32, @ANYBLOB="004000000000000400000000428a00480067000009299078ac1414bbac1414bb00442c1281e0000001fffffff7ac1414aa000010000000000000000005ac1e000100000005ac1414bb0000047094040000000000"]}) 00:13:58 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x8}) 00:13:58 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x20000080) 00:13:58 executing program 3: ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000000)={"3465b1e0f147969616069daf0cb92f59af63471984cbe1db96e5bb8baa2f", 0x15, 0x5, 0xc, [0x1, 0x70c440cd, 0x5, 0x938f, 0x1, 0x8, 0x4a7, 0x2, 0x0, 0x80000001, 0x2, 0x4, 0x8, 0xfffffffb, 0x100080, 0x645d93a2, 0xf1f4, 0x6]}) 00:13:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:13:58 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x5460, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:58 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', r2, 0x2f, 0x1, 0xbf, 0x8, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x80, 0x40, 0x10001, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x80, 0x7, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x10, 0x7800, 0x2, 0x217}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) 00:13:58 executing program 0: ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000000)={"3465b1e0f147969616069daf0cb92f59af63471984cbe1db96e5bb8baa2f", 0x15, 0x5, 0xc, [0x1, 0x70c440cd, 0x5, 0x938f, 0x1, 0x8, 0x4a7, 0x2, 0x0, 0x80000001, 0x2, 0x4, 0x8, 0xfffffffb, 0x100080, 0x645d93a2, 0xf1f4, 0x6]}) 00:13:58 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0xf}) 00:13:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:13:58 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x20000080) 00:13:58 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) 00:13:58 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x5460, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:58 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x11}) 00:13:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:13:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}]}]}, 0x59}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r1, 0xb1c}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x0) 00:13:58 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x22}) 00:13:58 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:58 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x6419, &(0x7f00000000c0)={0x0, 0x0, 0x2000, 0x0, 0x155}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 00:13:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 00:13:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf4c3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x53c9c2bd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 00:13:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:13:58 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', r2, 0x2f, 0x1, 0xbf, 0x8, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x80, 0x40, 0x10001, 0x9}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', r2, 0x2f, 0x1, 0xbf, 0x8, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x80, 0x40, 0x10001, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x80, 0x7, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x10, 0x7800, 0x2, 0x217}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@remote}, &(0x7f0000000040)=0x14) 00:13:58 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:58 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:58 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 00:13:58 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x6419, &(0x7f00000000c0)={0x0, 0x0, 0x2000, 0x0, 0x155}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) 00:13:58 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x204}) 00:13:58 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', 0x0}) 00:13:58 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:58 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:58 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) 00:13:58 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0xa, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', r2}, 0x90) r3 = syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x6, 0x800, 0x6, r0, 0x7, '\x00', r2, r3, 0x3, 0x0, 0x4, 0x6}, 0x48) 00:13:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee", @ANYRES32]}) 00:13:58 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x300}) 00:13:58 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:58 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x1, 0x800000, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x400}) 00:13:58 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:58 executing program 3: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000c00)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0xa, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5b, '\x00', r2}, 0x90) (async) r3 = syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x6, 0x800, 0x6, r0, 0x7, '\x00', r2, r3, 0x3, 0x0, 0x4, 0x6}, 0x48) 00:13:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf4c3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x53c9c2bd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 00:13:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="735b06d58f05c6b5116974300000000108fcb34da131c688e867b5ea0df9997fe9196aaf826c84fd779049d529b8e448f3f6b3801df35f6bce5ac7a415d7f48111138714da53b0d8db9d6a910244814e28e64651ab1ed022c603bcab48ac871e54328d13e9c27d9b27389d0f4e8aae1212dbe1bddf5de8f454c71d6f43b8ee"]}) 00:13:58 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x300}) 00:13:58 executing program 1: ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 00:13:58 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000180)=ANY=[]}) 00:13:58 executing program 4: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x1, 0x800000, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x400}) 00:13:59 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x402}) 00:13:59 executing program 2: ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) 00:13:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe7}]}]}, 0xe0}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x200400c4) 00:13:59 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x98, r0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @empty, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10000, @mcast2, 0x4aaa787}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000084}, 0x200008c0) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:59 executing program 1: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x406}) 00:13:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r0, 0x0, 0x30, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00'}, 0x30) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x4020940d, 0x0) socket$inet6(0xa, 0x3, 0xc50f) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x40049409, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x100, @tick, 0x80, {0x81, 0x40}, 0x6, 0x2, 0x3f}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000140)={@private1}, &(0x7f0000000180)=0x14) 00:13:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe0, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x34}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2f}}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xe7}]}]}, 0xe0}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x200400c4) 00:13:59 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x604}) 00:13:59 executing program 4: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x98, r0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @empty, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10000, @mcast2, 0x4aaa787}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000084}, 0x200008c0) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x98, r0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @empty, 0x10001}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10000, @mcast2, 0x4aaa787}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000084}, 0x200008c0) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) 00:13:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x22, 0x2, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x818}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x63cda2c4fa82bad2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:13:59 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 2: r0 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) io_uring_setup(0x7384, &(0x7f0000000740)={0x0, 0x201f, 0x1, 0x2, 0x3ac, 0x0, r1}) r2 = syz_io_uring_complete(0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@initdev, @initdev, 0x0}, &(0x7f0000000300)=0xc) r4 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4d, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x48) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x4030582a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10010, r4, 0x0) r10 = syz_io_uring_complete(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x1, 0x8, 0x4, 0x948, r2, 0x2, '\x00', r8, r10, 0x4, 0x3, 0x1, 0xd}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000540)='%pS \x00'}, 0x20) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r12, 0x401c5820, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) r14 = syz_io_uring_complete(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x87, &(0x7f0000000200)=""/135, 0x41100, 0x40, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x1, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[r5, 0xffffffffffffffff, r6, r7, r11, r12, r13, r14], &(0x7f0000000640)=[{0x0, 0x2, 0x8, 0x4}, {0x5, 0x3, 0x10}, {0x3, 0x3, 0x7, 0x6}], 0x10, 0x8001}, 0x90) 00:13:59 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x700}) 00:13:59 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r0, 0x0, 0x30, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00'}, 0x30) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x4020940d, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x3, 0xc50f) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x40049409, 0x0) (async) getsockopt$inet6_mreq(r0, 0x29, 0x1c, 0x0, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x100, @tick, 0x80, {0x81, 0x40}, 0x6, 0x2, 0x3f}) (async, rerun: 64) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000140)={@private1}, &(0x7f0000000180)=0x14) 00:13:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x22, 0x2, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x818}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x63cda2c4fa82bad2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:13:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x22, 0x2, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x818}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x63cda2c4fa82bad2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:13:59 executing program 1: r0 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) io_uring_setup(0x7384, &(0x7f0000000740)={0x0, 0x201f, 0x1, 0x2, 0x3ac, 0x0, r1}) r2 = syz_io_uring_complete(0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@initdev, @initdev, 0x0}, &(0x7f0000000300)=0xc) r4 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4d, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x48) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x4030582a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10010, r4, 0x0) r10 = syz_io_uring_complete(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x1, 0x8, 0x4, 0x948, r2, 0x2, '\x00', r8, r10, 0x4, 0x3, 0x1, 0xd}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000540)='%pS \x00'}, 0x20) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r12, 0x401c5820, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) r14 = syz_io_uring_complete(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x87, &(0x7f0000000200)=""/135, 0x41100, 0x40, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x1, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[r5, 0xffffffffffffffff, r6, r7, r11, r12, r13, r14], &(0x7f0000000640)=[{0x0, 0x2, 0x8, 0x4}, {0x5, 0x3, 0x10}, {0x3, 0x3, 0x7, 0x6}], 0x10, 0x8001}, 0x90) 00:13:59 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x5450, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) 00:13:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x22, 0x2, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x818}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x63cda2c4fa82bad2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:13:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x22, 0x2, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x818}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x63cda2c4fa82bad2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:13:59 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x5450, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) 00:13:59 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) io_uring_setup(0x7384, &(0x7f0000000740)={0x0, 0x201f, 0x1, 0x2, 0x3ac, 0x0, r1}) (async) r2 = syz_io_uring_complete(0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@initdev, @initdev, 0x0}, &(0x7f0000000300)=0xc) (async) r4 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4d, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x48) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x4030582a, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) (async) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10010, r4, 0x0) r10 = syz_io_uring_complete(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x1, 0x8, 0x4, 0x948, r2, 0x2, '\x00', r8, r10, 0x4, 0x3, 0x1, 0xd}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000540)='%pS \x00'}, 0x20) (async) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r12, 0x401c5820, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) (async) r14 = syz_io_uring_complete(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x87, &(0x7f0000000200)=""/135, 0x41100, 0x40, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x1, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[r5, 0xffffffffffffffff, r6, r7, r11, r12, r13, r14], &(0x7f0000000640)=[{0x0, 0x2, 0x8, 0x4}, {0x5, 0x3, 0x10}, {0x3, 0x3, 0x7, 0x6}], 0x10, 0x8001}, 0x90) 00:13:59 executing program 4: r0 = socket(0x0, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x22, 0x2, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x818}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x63cda2c4fa82bad2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:13:59 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={0x0}}, 0x20000080) 00:13:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x22, 0x2, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x818}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x63cda2c4fa82bad2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:13:59 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) io_uring_setup(0x7384, &(0x7f0000000740)={0x0, 0x201f, 0x1, 0x2, 0x3ac, 0x0, r1}) r2 = syz_io_uring_complete(0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@initdev, @initdev, 0x0}, &(0x7f0000000300)=0xc) r4 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4d, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x48) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x4030582a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10010, r4, 0x0) r10 = syz_io_uring_complete(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x1, 0x8, 0x4, 0x948, r2, 0x2, '\x00', r8, r10, 0x4, 0x3, 0x1, 0xd}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000540)='%pS \x00'}, 0x20) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r12, 0x401c5820, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) r14 = syz_io_uring_complete(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x87, &(0x7f0000000200)=""/135, 0x41100, 0x40, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x1, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[r5, 0xffffffffffffffff, r6, r7, r11, r12, r13, r14], &(0x7f0000000640)=[{0x0, 0x2, 0x8, 0x4}, {0x5, 0x3, 0x10}, {0x3, 0x3, 0x7, 0x6}], 0x10, 0x8001}, 0x90) 00:13:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x22, 0x2, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x818}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x63cda2c4fa82bad2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:13:59 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x22, 0x2, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 00:13:59 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x2) 00:13:59 executing program 2: r0 = socket(0x11, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) io_uring_setup(0x7384, &(0x7f0000000740)={0x0, 0x201f, 0x1, 0x2, 0x3ac, 0x0, r1}) r2 = syz_io_uring_complete(0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000002c0)={@initdev, @initdev, 0x0}, &(0x7f0000000300)=0xc) r4 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4d, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x48) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x4030582a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10010, r4, 0x0) r10 = syz_io_uring_complete(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x1, 0x8, 0x4, 0x948, r2, 0x2, '\x00', r8, r10, 0x4, 0x3, 0x1, 0xd}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000540)='%pS \x00'}, 0x20) r12 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r12, 0x401c5820, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) r14 = syz_io_uring_complete(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x87, &(0x7f0000000200)=""/135, 0x41100, 0x40, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x1, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[r5, 0xffffffffffffffff, r6, r7, r11, r12, r13, r14], &(0x7f0000000640)=[{0x0, 0x2, 0x8, 0x4}, {0x5, 0x3, 0x10}, {0x3, 0x3, 0x7, 0x6}], 0x10, 0x8001}, 0x90) 00:13:59 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 00:13:59 executing program 1: socket(0x22, 0x2, 0x2) 00:13:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x694}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000801) 00:13:59 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) 00:13:59 executing program 1: r0 = socket(0x11, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 0: socket(0x0, 0x2, 0x2) 00:13:59 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xb, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x94, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x823}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd0f1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040091}, 0x40000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="24395eec", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:59 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) 00:13:59 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0xf00}) 00:13:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x694}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000801) 00:13:59 executing program 2: r0 = socket(0x11, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xb, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x94, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x823}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd0f1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040091}, 0x40000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="24395eec", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:59 executing program 4: socket(0x0, 0x2, 0x2) 00:13:59 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) 00:13:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x694}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000801) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48000) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={0x14, r4, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x694}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000801) (async) 00:13:59 executing program 0: socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xb, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX]}, 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xb, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x94, r2, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x823}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd0f1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x24040091}, 0x40000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="24395eec", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:59 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x1100}) 00:13:59 executing program 4: r0 = socket(0x22, 0x2, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 00:13:59 executing program 3: socket(0x0, 0x2, 0x2) 00:13:59 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x2200}) 00:13:59 executing program 1: r0 = socket(0x0, 0x2, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 00:13:59 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1500000079cb3e9c", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:59 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x29, 0x80000, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', r2, 0x2f, 0xe3, 0xff, 0x7, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4700, 0x40, 0x7, 0x2}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, &(0x7f0000000100), &(0x7f0000000140)='GPL\x00', 0x400, 0xb7, &(0x7f0000000180)=""/183, 0x40f00, 0xa, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xa, 0x4000000, 0xdc06}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0x7, 0x4}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x1, 0x7, 0xb}, {0x1, 0x1, 0xe}], 0x10, 0x800}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00'}}) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) 00:13:59 executing program 3: socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 4: socket(0x22, 0x0, 0x2) 00:13:59 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x800000}) 00:13:59 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1500000079cb3e9c", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:59 executing program 0: r0 = socket(0x0, 0x2, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 00:13:59 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x29, 0x80000, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl1\x00', r2, 0x2f, 0xe3, 0xff, 0x7, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4700, 0x40, 0x7, 0x2}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, &(0x7f0000000100), &(0x7f0000000140)='GPL\x00', 0x400, 0xb7, &(0x7f0000000180)=""/183, 0x40f00, 0xa, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xa, 0x4000000, 0xdc06}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0x7, 0x4}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x1, 0x7, 0xb}, {0x1, 0x1, 0xe}], 0x10, 0x800}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, &(0x7f0000000100), &(0x7f0000000140)='GPL\x00', 0x400, 0xb7, &(0x7f0000000180)=""/183, 0x40f00, 0xa, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000340)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xa, 0x4000000, 0xdc06}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0x7, 0x4}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x1, 0x7, 0xb}, {0x1, 0x1, 0xe}], 0x10, 0x800}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @rand_addr=' \x01\x00'}}) getsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x0) 00:13:59 executing program 1: socket(0x22, 0x0, 0x2) 00:13:59 executing program 3: socket(0x22, 0x0, 0x2) 00:13:59 executing program 2: socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x33c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff01}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaaf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_PROP={0x4}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x98}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @local}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @remote, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x401}}}}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "5f548796a98c95eb9843c6b13ba2a3d2d93b2cae"}}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d4d0b8a0e9c153a2a1a91d95c90a396c763686cb2c"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xce0}, @TIPC_NLA_NODE_ID={0x1f, 0x3, "0f7f8ef03e66ca5afaa4f29c0a09f952d10064132576e0410bc74c"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "51e78bb1b9c7a2904f85e3a71cb39dc2c78b4c09af"}}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "f5be0a68419690837fbdb427232a453db9d2c4a965430b71a811fd618e9178"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7d32}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:13:59 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x4, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:13:59 executing program 3: socket(0x22, 0x0, 0x2) 00:13:59 executing program 4: socket(0x22, 0x0, 0x2) 00:14:00 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x541b, 0x0) r2 = syz_io_uring_complete(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x200, 0xb6e, 0x4, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x4, 0x1, 0x5, 0xa}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7a2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x835, 0x2}, 0x48) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0x468, r7, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76cb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x180, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @empty, 0xac9}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b83}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd705}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf1}]}, @TIPC_NLA_LINK={0x174, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8000002}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x926}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58a2f173}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x91000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x468}, 0x1, 0x0, 0x0, 0x4000081}, 0x4008020) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x80086601, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r9, 0x40086602, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ffffff7f000000000900000018110000", @ANYRES32, @ANYBLOB="004cc0b6e9375fb6ab0f81e93000000000000000b7080000499131090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008417bad8500000018000000007a9bcfd5c49bbd34c80235e580495fa1100279bd4edc3e6598f4161625da77445b4bcf114ba998ad836aa642ee56e5422059e985d79f9539f0f098", @ANYRES32=r0, @ANYBLOB="000000000000000085100000000000001832000001000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xff, 0x46, &(0x7f0000000140)=""/70, 0x41000, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000001c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xe, 0x1, 0xa1d}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r5, r6, r8, r9, r10, r11], &(0x7f0000000540)=[{0x0, 0x5, 0x4, 0x2}, {0x3, 0x2, 0x9, 0xc}, {0x5, 0x5, 0x9, 0x6}, {0x1, 0x4, 0xa, 0x1}, {0x4, 0x1, 0x2, 0x8}, {0x3, 0x2, 0x7, 0x4}, {0x4, 0x1, 0xf, 0x3}, {0x2, 0x3, 0x10, 0xc}, {0x2, 0x1, 0x8, 0x6}, {0x3, 0x4, 0x7, 0xa}], 0x10, 0x4}, 0x90) 00:14:00 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x1000000}) 00:14:00 executing program 1: r0 = socket(0x0, 0x2, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 00:14:00 executing program 2: socket(0x22, 0x0, 0x2) 00:14:00 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x20000080) 00:14:00 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x4, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:00 executing program 2: socket(0x22, 0x2, 0x0) 00:14:00 executing program 1: socket(0x0, 0x0, 0x2) 00:14:00 executing program 3: r0 = socket(0x22, 0x0, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 00:14:00 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)={0x14, r2, 0x1, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x4c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd45e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80810}, 0x4000000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000000c0)={0x0, 0x2, 0x2000, 0x0, 0x1}) socketpair(0x3, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\f\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x440}, 0x1, 0x0, 0x0, 0x10}, 0x240480c0) 00:14:00 executing program 3: socket(0x0, 0x0, 0x2) 00:14:00 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x541b, 0x0) r2 = syz_io_uring_complete(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x200, 0xb6e, 0x4, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x4, 0x1, 0x5, 0xa}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7a2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x835, 0x2}, 0x48) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0x468, r7, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76cb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x180, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @empty, 0xac9}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b83}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd705}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf1}]}, @TIPC_NLA_LINK={0x174, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8000002}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x926}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58a2f173}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x91000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x468}, 0x1, 0x0, 0x0, 0x4000081}, 0x4008020) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x80086601, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r9, 0x40086602, 0x0) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ffffff7f000000000900000018110000", @ANYRES32, @ANYBLOB="004cc0b6e9375fb6ab0f81e93000000000000000b7080000499131090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008417bad8500000018000000007a9bcfd5c49bbd34c80235e580495fa1100279bd4edc3e6598f4161625da77445b4bcf114ba998ad836aa642ee56e5422059e985d79f9539f0f098", @ANYRES32=r0, @ANYBLOB="000000000000000085100000000000001832000001000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xff, 0x46, &(0x7f0000000140)=""/70, 0x41000, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000001c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xe, 0x1, 0xa1d}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r5, r6, r8, r9, r10, r11], &(0x7f0000000540)=[{0x0, 0x5, 0x4, 0x2}, {0x3, 0x2, 0x9, 0xc}, {0x5, 0x5, 0x9, 0x6}, {0x1, 0x4, 0xa, 0x1}, {0x4, 0x1, 0x2, 0x8}, {0x3, 0x2, 0x7, 0x4}, {0x4, 0x1, 0xf, 0x3}, {0x2, 0x3, 0x10, 0xc}, {0x2, 0x1, 0x8, 0x6}, {0x3, 0x4, 0x7, 0xa}], 0x10, 0x4}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x541b, 0x0) (async) syz_io_uring_complete(0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x8, 0x200, 0xb6e, 0x4, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x4, 0x1, 0x5, 0xa}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7a2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x835, 0x2}, 0x48) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) (async) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0x468, r7, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4f7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76cb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x180, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @empty, 0xac9}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @mcast2, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9b83}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd705}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf1}]}, @TIPC_NLA_LINK={0x174, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8000002}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x926}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58a2f173}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x91000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x468}, 0x1, 0x0, 0x0, 0x4000081}, 0x4008020) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x80086601, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r9, 0x40086602, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r10, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000ffffff7f000000000900000018110000", @ANYRES32, @ANYBLOB="004cc0b6e9375fb6ab0f81e93000000000000000b7080000499131090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008417bad8500000018000000007a9bcfd5c49bbd34c80235e580495fa1100279bd4edc3e6598f4161625da77445b4bcf114ba998ad836aa642ee56e5422059e985d79f9539f0f098", @ANYRES32=r0, @ANYBLOB="000000000000000085100000000000001832000001000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xff, 0x46, &(0x7f0000000140)=""/70, 0x41000, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000001c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xe, 0x1, 0xa1d}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000500)=[r3, r4, r5, r6, r8, r9, r10, r11], &(0x7f0000000540)=[{0x0, 0x5, 0x4, 0x2}, {0x3, 0x2, 0x9, 0xc}, {0x5, 0x5, 0x9, 0x6}, {0x1, 0x4, 0xa, 0x1}, {0x4, 0x1, 0x2, 0x8}, {0x3, 0x2, 0x7, 0x4}, {0x4, 0x1, 0xf, 0x3}, {0x2, 0x3, 0x10, 0xc}, {0x2, 0x1, 0x8, 0x6}, {0x3, 0x4, 0x7, 0xa}], 0x10, 0x4}, 0x90) (async) 00:14:00 executing program 2: r0 = socket(0x22, 0x0, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 00:14:00 executing program 0: socket(0x22, 0x2, 0x0) [ 840.175415][ T6184] Bluetooth: hci2: command 0x0405 tx timeout 00:14:00 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x20000080) 00:14:00 executing program 0: r0 = socket(0x22, 0x0, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 00:14:00 executing program 4: socket(0x22, 0x2, 0x0) 00:14:00 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)={0x14, r2, 0x1, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x4c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd45e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80810}, 0x4000000) (async, rerun: 32) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (rerun: 32) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000000c0)={0x0, 0x2, 0x2000, 0x0, 0x1}) socketpair(0x3, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\f\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x440}, 0x1, 0x0, 0x0, 0x10}, 0x240480c0) 00:14:00 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, 0x0) 00:14:00 executing program 0: socket(0x0, 0x0, 0x2) 00:14:00 executing program 2: r0 = socket(0x22, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 00:14:00 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x20000080) 00:14:00 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) socket$inet6(0xa, 0x3, 0x4) (async) getsockopt$inet6_mreq(r1, 0x29, 0x14, 0x0, 0x0) (async) 00:14:00 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x2000000}) 00:14:00 executing program 1: socket(0x22, 0x0, 0x0) 00:14:00 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="800100000000fe8234d1419f01454ff96ab8c683b306795d0608000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xd8, r0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x121}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x50fd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8004004}, 0x14) io_uring_setup(0x6e20, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x221}) 00:14:00 executing program 3: r0 = socket(0x22, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 00:14:00 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:14:00 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x2040000}) 00:14:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x1) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', r2, r0, 0x4, 0x4, 0x4}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="00010000000000ae000000002f907800000000ac1414bb860600000003863f0000000002100cd89ab9058e2f773be883aa9435070465450208a8ac434e2c9a06124378e886b8293f9dc34bb1f2b7ed082205074fd3a57b620704cc1b070742ffffffff070764ffffff4c58"]}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1f, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x48) 00:14:00 executing program 2: socket(0x22, 0x0, 0x0) 00:14:00 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="800100000000fe8234d1419f01454ff96ab8c683b306795d0608000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xd8, r0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x121}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x50fd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8004004}, 0x14) io_uring_setup(0x6e20, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x221}) 00:14:00 executing program 2: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:14:00 executing program 3: socket(0x22, 0x0, 0x0) 00:14:00 executing program 4: r0 = socket(0x22, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) 00:14:00 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x3000000}) 00:14:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x1) getsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', r2, r0, 0x4, 0x4, 0x4}, 0x48) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r2, @ANYBLOB="00010000000000ae000000002f907800000000ac1414bb860600000003863f0000000002100cd89ab9058e2f773be883aa9435070465450208a8ac434e2c9a06124378e886b8293f9dc34bb1f2b7ed082205074fd3a57b620704cc1b070742ffffffff070764ffffff4c58"]}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1f, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x48) 00:14:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x22, 0x2, 0x2) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x818}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x63cda2c4fa82bad2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:00 executing program 0: r0 = socket(0x22, 0x2, 0x2) syz_genetlink_get_family_id$batadv(0x0, r0) 00:14:00 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="daaea2bbdb1c93d2b31e1bb5f7c4bc25b608612fabce6a44f3b4d5d590f16b195376693fefe51e7685597a8a7b288761591a5cf42edab275352c9dfb8d2f2862736b796258b9a73fe3da597a11baa6b644ab3d57199f48a042393c7cb7ab620577e59e622326b5920faab7a35a1c7984a726c2c2fe006500"/134, @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:00 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x4000000}) 00:14:00 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) 00:14:00 executing program 0: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:14:00 executing program 1: r0 = socket(0x22, 0x2, 0x2) syz_genetlink_get_family_id$batadv(0x0, r0) 00:14:00 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x6040000}) 00:14:00 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) 00:14:00 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="daaea2bbdb1c93d2b31e1bb5f7c4bc25b608612fabce6a44f3b4d5d590f16b195376693fefe51e7685597a8a7b288761591a5cf42edab275352c9dfb8d2f2862736b796258b9a73fe3da597a11baa6b644ab3d57199f48a042393c7cb7ab620577e59e622326b5920faab7a35a1c7984a726c2c2fe006500"/134, @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:00 executing program 3: r0 = socket(0x22, 0x2, 0x2) syz_genetlink_get_family_id$batadv(0x0, r0) 00:14:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 00:14:00 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x37e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@private, @private, 0x0}, &(0x7f0000000240)=0xc) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r7, 0x10000000) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r9, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r10, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x7, '\x00', r12, r13, 0x4, 0x2}, 0x48) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r17 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r17, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r17, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r18, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) r20 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r19, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r22 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r20, 0x7, '\x00', r21, r22, 0x4, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x16, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffff49c}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x20}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x76, 0x65, &(0x7f0000000180)=""/101, 0x40f00, 0x4, '\x00', r2, 0x25, r3, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r4, r5, r6, r7, r13, r14, r15, r16, r22], 0x0, 0x10, 0x9}, 0x90) 00:14:00 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="00010000004fc3f124ed450300fedbdf25080000009b8d13022ee0fa7b2160287abe6389bf15fff5baece47add0b4307a11fa904bc96a3531c607e9ebc004685a65f6f040b1e3fc67bf2f8eb6c5c910bcf82fc2d0c8ad01be4836278d296c9b360a78103915a5a0cb6e5d3ec98d959aee366ae49b0e78a692b538e79a4ab3aa8f48966d9dd256e589991b26cce6cf339d1c4982ac20b69663725ae36e03064c837c97dbefa13be909d5a0e3b21f0f0bf854cfcabbf860065381417ef952fdf00f0904b748356085ac9f04bbb22b6c1000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:00 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x7000000}) 00:14:00 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000080) 00:14:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 00:14:00 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="00010000004fc3f124ed450300fedbdf25080000009b8d13022ee0fa7b2160287abe6389bf15fff5baece47add0b4307a11fa904bc96a3531c607e9ebc004685a65f6f040b1e3fc67bf2f8eb6c5c910bcf82fc2d0c8ad01be4836278d296c9b360a78103915a5a0cb6e5d3ec98d959aee366ae49b0e78a692b538e79a4ab3aa8f48966d9dd256e589991b26cce6cf339d1c4982ac20b69663725ae36e03064c837c97dbefa13be909d5a0e3b21f0f0bf854cfcabbf860065381417ef952fdf00f0904b748356085ac9f04bbb22b6c1000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:00 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x8000000}) 00:14:00 executing program 2: socket(0x22, 0x2, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) 00:14:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff1ee}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfa}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000021) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1c0d0d0200eeffffffcebf17997c1ef986666fa01889ff0100007c6849de933d0b8b975d3d2b94cc42713cb0ad586f61332873a5534b123875595272dddd550000000000000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 00:14:00 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x90, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffe0}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x4004000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:00 executing program 3: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x20000080) 00:14:00 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0xf000000}) 00:14:00 executing program 1: socket(0x22, 0x2, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) 00:14:00 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x37e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x48) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@private, @private, 0x0}, &(0x7f0000000240)=0xc) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pi6 \x00'}, 0x20) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x10, r7, 0x10000000) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r9, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r10, 0xffffffffffffffff, 0x2, 0x3}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r13 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x7, '\x00', r12, r13, 0x4, 0x2}, 0x48) (async) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x48) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r17 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r17, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r17, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r18, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) r20 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r19, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) r22 = syz_io_uring_complete(0x0) (rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r20, 0x7, '\x00', r21, r22, 0x4, 0x2}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x16, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffff49c}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x20}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x76, 0x65, &(0x7f0000000180)=""/101, 0x40f00, 0x4, '\x00', r2, 0x25, r3, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r4, r5, r6, r7, r13, r14, r15, r16, r22], 0x0, 0x10, 0x9}, 0x90) 00:14:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff1ee}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfa}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000021) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1c0d0d0200eeffffffcebf17997c1ef986666fa01889ff0100007c6849de933d0b8b975d3d2b94cc42713cb0ad586f61332873a5534b123875595272dddd550000000000000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 00:14:00 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x90, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffe0}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x4004000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:00 executing program 2: socket(0x22, 0x2, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) 00:14:00 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x90, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffe0}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_team\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x4004000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:00 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 00:14:00 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x11000000}) 00:14:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffff1ee}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfa}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000021) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1c0d0d0200eeffffffcebf17997c1ef986666fa01889ff0100007c6849de933d0b8b975d3d2b94cc42713cb0ad586f61332873a5534b123875595272dddd550000000000000000"], 0x14}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) 00:14:00 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x104, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x70ade55c, @loopback, 0x1ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xe18, @loopback, 0xf6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfd8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10001}, 0x2000c000) 00:14:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x2, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:01 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x22000000}) 00:14:01 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="04010001e364fedbdf250800000017fa0099300e81416c3102afb4a58b03b4523f76525f661350d046233007ada833b440177e24597967a0053b1777cf7df038ae96b4ff8e1e00915eee26954fdcc9b6c59b7e261daf351f34e990c47beb0622170e9d6b654b330e9074c8479f9ce6c325174b3b36689a6491d1cebfe9dbc5ff0c797a105f00b58a8ad06d1c3cbc0221da0b2ccf2cf08c556cd56977f3a27abc35de120a85b3a5a89d4c6508d4f0a52793384d46fb48439ec7be5a98a8e417defb500ba9a009859d029218f6b600247c46f2d1b78a0de3b218d5873e4618ddaee6d4b14b38187634150bd11aac0304d71bf292a5447f0864f202a5164a"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x104, r0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x70ade55c, @loopback, 0x1ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xe18, @loopback, 0xf6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xfd8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x10001}, 0x2000c000) 00:14:01 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x80) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0xffffff5f) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0xffffff5f) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/62) 00:14:01 executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:01 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000300)={@private1, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x2d, 0xfb, 0x1f, 0x8, 0x53, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, 0x8, 0x0, 0x3, 0x3f}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x4, 0x2}, 0x48) getsockopt$inet6_mreq(r5, 0x29, 0x15, 0x0, 0x0) 00:14:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8213}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044491}, 0x0) 00:14:01 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:01 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000000c0)={0x0, 0x8613, 0x2000, 0x0, 0x23d}) 00:14:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x3, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:01 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c, 0x0, 0x25dfdbfe}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8213}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044491}, 0x0) 00:14:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000300)={@private1, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x2d, 0xfb, 0x1f, 0x8, 0x53, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, 0x8, 0x0, 0x3, 0x3f}}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x14) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x4, 0x2}, 0x48) getsockopt$inet6_mreq(r5, 0x29, 0x15, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000300)={@private1}, &(0x7f0000000340)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', r1, 0x2d, 0xfb, 0x1f, 0x8, 0x53, @dev={0xfe, 0x80, '\x00', 0x20}, @mcast2, 0x8, 0x0, 0x3, 0x3f}}) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)}, 0x10) (async) syz_io_uring_complete(0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x4, 0x2}, 0x48) (async) getsockopt$inet6_mreq(r5, 0x29, 0x15, 0x0, 0x0) (async) 00:14:01 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000000c0)={0x0, 0x8613, 0x2000, 0x0, 0x23d}) 00:14:01 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x2}) 00:14:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x4, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:01 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0x2, &(0x7f00000005c0)=""/48) 00:14:01 executing program 3: setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x3ff, @mcast2}}, 0x24) 00:14:01 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000006c0)={&(0x7f0000000500), 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000000"], 0x40}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0xd4, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfa}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:01 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x3}) 00:14:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008884}, 0x4850) 00:14:01 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@rand_addr, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r1, 0x29, 0x8, 0x6, 0x84, 0x0, @private1, @mcast2, 0x10, 0x80, 0x6, 0x7d8c}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8200000, 0x0, 0xffffffffffffffff, 0x3, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3}, 0x48) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) r5 = syz_io_uring_complete(0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7, '\x00', r4, r5, 0x4, 0x2}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, 0x0}, 0x20) (async) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) [ 841.322865][ T5277] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. 00:14:01 executing program 2: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x29, 0x4, 0x9, 0x1, 0x13, @mcast1, @rand_addr=' \x01\x00', 0x7, 0x40, 0x0, 0x996}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x7800, 0x40, 0x7, 0x0, {{0xa, 0x4, 0x0, 0x2, 0x28, 0x66, 0x0, 0x9, 0x2f, 0x0, @empty, @empty, {[@rr={0x7, 0x13, 0x7d, [@loopback, @multicast1, @loopback, @multicast2]}]}}}}}) 00:14:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x7, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:01 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000006c0)={&(0x7f0000000500), 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000000"], 0x40}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0xd4, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfa}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000006c0)={&(0x7f0000000500), 0xc, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000000"], 0x40}}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0xd4, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfa}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) 00:14:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008884}, 0x4850) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008884}, 0x4850) (async) [ 841.371479][ T5288] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 00:14:01 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x4}) 00:14:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x8, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:01 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8, 0x3, 0x2}) 00:14:01 executing program 2: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0xb, &(0x7f00000005c0)=""/48) 00:14:01 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x29, 0x4, 0x9, 0x1, 0x13, @mcast1, @rand_addr=' \x01\x00', 0x7, 0x40, 0x0, 0x996}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x7800, 0x40, 0x7, 0x0, {{0xa, 0x4, 0x0, 0x2, 0x28, 0x66, 0x0, 0x9, 0x2f, 0x0, @empty, @empty, {[@rr={0x7, 0x13, 0x7d, [@loopback, @multicast1, @loopback, @multicast2]}]}}}}}) 00:14:01 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x29, 0x4, 0x9, 0x1, 0x13, @mcast1, @rand_addr=' \x01\x00', 0x7, 0x40, 0x0, 0x996}}) (async, rerun: 64) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x7800, 0x40, 0x7, 0x0, {{0xa, 0x4, 0x0, 0x2, 0x28, 0x66, 0x0, 0x9, 0x2f, 0x0, @empty, @empty, {[@rr={0x7, 0x13, 0x7d, [@loopback, @multicast1, @loopback, @multicast2]}]}}}}}) 00:14:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000001}, 0x10004001) 00:14:01 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x7}) 00:14:01 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8, 0x3, 0x2}) 00:14:01 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8, 0x3, 0x2}) 00:14:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x2) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x154, r3, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000001}, 0x10004001) (rerun: 64) 00:14:01 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8, 0x3, 0x2}) 00:14:01 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x8}) 00:14:01 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x5) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x300, r0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x521}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x46, 0x3, "cb79d814a5d9729babf13ff8b778f5bb96d79c4bee7adbdd0da320f13125dc6a370da15d755e2cb29b6fcbaffbe80d765b34655ce5212facae1f0de4b481e3a96bf7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "48d7bce736cd5d18979cfb40a4ef8e4f66641532ec79f790b87d29cb72b72859e7"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x25b, @mcast2, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_ID={0x20, 0x3, "3f61e8dcd3b83e3d80a94ee05c990d5052db6c0576729286303ad134"}, @TIPC_NLA_NODE_ID={0x102, 0x3, "8f1282ecac66112c617a13ddb483669611483dffea43d73a5231e41456b7989d4194712d0607f6ebd49b506e543406e33c1c0fb41fb6aec9012576d3e71bb401cb6f516c7afbc4e358f36da9540049c60af8329bd5f851e852dbe4809277812abb368fc2c83e69084a30496e8662400aa6a0402dd4a3ae9077220d1f6f522099e58439543142dab47d2a4a885b39e98bddc6788bc568bd4c9a8a797375a3232ce64ab52ab6697f55f8c7809e39408bef3be1d46e0b767add901c5f108af3bbd60de38ffb4a94a07f5749e6208d1af0ba7e433d331859b71d34f54e6116882dde5907d5f55dd38d7b97474774db500d7f5a9f54c874d4151df43d5a37761b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x300}}, 0x20000010) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x2, 0x5, {{0xa, 0x4, 0x1, 0x7, 0x28, 0x66, 0x0, 0xe8, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x5, "cc4ea4"}, @generic={0x83, 0x7, "c8146b79de"}, @generic={0x88, 0x7, "89fee5648e"}]}}}}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x24000000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:01 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x29, 0x4, 0x9, 0x1, 0x13, @mcast1, @rand_addr=' \x01\x00', 0x7, 0x40, 0x0, 0x996}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x7800, 0x40, 0x7, 0x0, {{0xa, 0x4, 0x0, 0x2, 0x28, 0x66, 0x0, 0x9, 0x2f, 0x0, @empty, @empty, {[@rr={0x7, 0x13, 0x7d, [@loopback, @multicast1, @loopback, @multicast2]}]}}}}}) 00:14:01 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8, 0x3, 0x2}) 00:14:01 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0xf}) 00:14:01 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x5) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x300, r0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x521}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x46, 0x3, "cb79d814a5d9729babf13ff8b778f5bb96d79c4bee7adbdd0da320f13125dc6a370da15d755e2cb29b6fcbaffbe80d765b34655ce5212facae1f0de4b481e3a96bf7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "48d7bce736cd5d18979cfb40a4ef8e4f66641532ec79f790b87d29cb72b72859e7"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x25b, @mcast2, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_ID={0x20, 0x3, "3f61e8dcd3b83e3d80a94ee05c990d5052db6c0576729286303ad134"}, @TIPC_NLA_NODE_ID={0x102, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x300}}, 0x20000010) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'tunl0\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x8, 0x8000, 0x2, 0x5, {{0xa, 0x4, 0x1, 0x7, 0x28, 0x66, 0x0, 0xe8, 0x4, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x5, "cc4ea4"}, @generic={0x83, 0x7, "c8146b79de"}, @generic={0x88, 0x7, "89fee5648e"}]}}}}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x24000000) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010000008000"/18], 0x18}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44890}, 0xc0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c, 0x70bd28}, 0x14}}, 0x0) 00:14:01 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x4, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8, 0x3, 0x2}) 00:14:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0xf, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:01 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0xf}) 00:14:01 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x11}) 00:14:01 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/111) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r2 = socket(0x27, 0x6, 0x10001) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r3 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) io_uring_setup(0x7e8f, &(0x7f0000000200)={0x0, 0xf56a, 0x400, 0x3, 0x235, 0x0, r3}) 00:14:01 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8, 0x3, 0x2}) 00:14:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010000008000"/18], 0x18}}, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r2, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44890}, 0xc0) (async, rerun: 64) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c, 0x70bd28}, 0x14}}, 0x0) 00:14:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x14, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:01 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x22}) 00:14:01 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/111) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r2 = socket(0x27, 0x6, 0x10001) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) (async, rerun: 32) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (rerun: 32) r3 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) io_uring_setup(0x7e8f, &(0x7f0000000200)={0x0, 0xf56a, 0x400, 0x3, 0x235, 0x0, r3}) 00:14:01 executing program 1: io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8, 0x3, 0x2}) 00:14:01 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x204}) 00:14:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x180, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x381}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x24, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:01 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x300}) 00:14:01 executing program 0: io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8, 0x3, 0x2}) 00:14:02 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xe4, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20040014}, 0x4000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x180, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3f}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x381}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) [ 842.246321][ T6184] Bluetooth: hci2: command 0x0405 tx timeout 00:14:02 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xe4, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20040014}, 0x4000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) (async) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xe4, r3, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20040014}, 0x4000) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) 00:14:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x60, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:02 executing program 1: io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8, 0x3, 0x2}) 00:14:02 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x402}) 00:14:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4729}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x22}}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xae}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x40480c0) 00:14:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r1}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r1, 0x29, 0x5, 0x7, 0x400, 0x43, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x700, 0x23e39886d1b36dc1, 0x4bf9, 0x4}}) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 00:14:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4729}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x22}}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xae}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x40480c0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) (async) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r1, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4729}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010100}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x22}}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x56}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xae}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x40480c0) (async) 00:14:02 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x406}) 00:14:02 executing program 0: io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8, 0x3, 0x2}) 00:14:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x300, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:02 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r1}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r1, 0x29, 0x5, 0x7, 0x400, 0x43, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x700, 0x23e39886d1b36dc1, 0x4bf9, 0x4}}) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 00:14:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r1}, 0x90) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r1, 0x29, 0x5, 0x7, 0x400, 0x43, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x700, 0x23e39886d1b36dc1, 0x4bf9, 0x4}}) (async) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 00:14:02 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xc0, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400040}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40010}, 0x44800) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8921, &(0x7f0000000e80)={'batadv_slave_0\x00'}) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 00:14:02 executing program 1: io_uring_setup(0x641c, 0x0) 00:14:02 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x604}) 00:14:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r1}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r1, 0x29, 0x5, 0x7, 0x400, 0x43, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x700, 0x23e39886d1b36dc1, 0x4bf9, 0x4}}) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 00:14:02 executing program 1: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) 00:14:02 executing program 2: io_uring_setup(0x641c, 0x0) 00:14:02 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x700}) 00:14:02 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xc0, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400040}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40010}, 0x44800) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8921, &(0x7f0000000e80)={'batadv_slave_0\x00'}) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xc0, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400040}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40010}, 0x44800) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8921, &(0x7f0000000e80)={'batadv_slave_0\x00'}) (async) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) 00:14:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x700, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r1}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r1, 0x29, 0x5, 0x7, 0x400, 0x43, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x700, 0x23e39886d1b36dc1, 0x4bf9, 0x4}}) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 00:14:02 executing program 1: io_uring_setup(0x641c, 0x0) 00:14:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:02 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0xf00}) 00:14:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0xf00, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:02 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r0}, 0x90) 00:14:02 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000004d2f8b0225fd27e57c3860591122c52edcf1c337de785a228be350b4ef77a4b752a47a02bb09d4e5af0a2a1f16b5be65eb722f8af91d21e1f46cb7fa6f5a34bd230d3096b70a2282d36cf2e5a10d91afcdacfaf6a3bb9816fe76d6c6e801b9bdd6b9d82afd9e1d2e0ff11af29a62c2b4289bc7bbab71d526b32b87469de822c7fee8f130447f27e49f375813d63e1ed63eadf3bc265c670d197bf12a0ae40adeb3f183c3b56fc2834d8096f2e538ba48674245d1af9edfc26f", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000600"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x10}) socket$nl_generic(0x10, 0x3, 0x10) 00:14:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1c0b000000040000000002000000"], 0x14}}, 0x0) 00:14:02 executing program 3: io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x3, 0x2}) 00:14:02 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x90) 00:14:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x1400, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:02 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x1100}) 00:14:02 executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7ff, 0x20180) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', r1, r2, 0x5, 0x5, 0x1}, 0x48) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:02 executing program 0: io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x3, 0x2}) 00:14:02 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000004d2f8b0225fd27e57c3860591122c52edcf1c337de785a228be350b4ef77a4b752a47a02bb09d4e5af0a2a1f16b5be65eb722f8af91d21e1f46cb7fa6f5a34bd230d3096b70a2282d36cf2e5a10d91afcdacfaf6a3bb9816fe76d6c6e801b9bdd6b9d82afd9e1d2e0ff11af29a62c2b4289bc7bbab71d526b32b87469de822c7fee8f130447f27e49f375813d63e1ed63eadf3bc265c670d197bf12a0ae40adeb3f183c3b56fc2834d8096f2e538ba48674245d1af9edfc26f", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000600"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x10}) (async) socket$nl_generic(0x10, 0x3, 0x10) 00:14:02 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x90) 00:14:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1c0b000000040000000002000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1c0b000000040000000002000000"], 0x14}}, 0x0) (async) 00:14:02 executing program 3: io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x8, 0x3, 0x2}) 00:14:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x144d, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:02 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x2200}) 00:14:02 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x90) 00:14:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1c02000000000000000002000000080031000500000005003800180000008f8b0bef97682d12c730e7d2e94e7e3c34fc0b0cd522770d1fde1ba834b766005d59389e50c652973d35dd868523209f0546135409dae0545b4fcf451caaf15b8316cc14c20918084cbe3ac29cdb31563ab6102d988377f33fd25aa3b0d171b78f450f9ba4ddff9bc2eac177464c207b6dafdee7508a05236b64500c45edd17be40b975245c53031560bce2570f8ad2e68f0747245e130290ea9c5b3b468f19034"], 0x24}}, 0x0) 00:14:02 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1b8, r2, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf65}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x800}, 0x100) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:02 executing program 1: io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0x3, 0x2}) 00:14:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x2400, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r1, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1c02000000000000000002000000080031000500000005003800180000008f8b0bef97682d12c730e7d2e94e7e3c34fc0b0cd522770d1fde1ba834b766005d59389e50c652973d35dd868523209f0546135409dae0545b4fcf451caaf15b8316cc14c20918084cbe3ac29cdb31563ab6102d988377f33fd25aa3b0d171b78f450f9ba4ddff9bc2eac177464c207b6dafdee7508a05236b64500c45edd17be40b975245c53031560bce2570f8ad2e68f0747245e130290ea9c5b3b468f19034"], 0x24}}, 0x0) 00:14:02 executing program 0: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 00:14:02 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x800000}) 00:14:02 executing program 3: io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0x3, 0x2}) 00:14:02 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1b8, r2, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6b}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf65}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x4}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x800}, 0x100) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x4d14, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:02 executing program 4: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000000)='io.pressure\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7ff, 0x20180) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', r1, r2, 0x5, 0x5, 0x1}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', r1, r2, 0x5, 0x5, 0x1}, 0x48) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:02 executing program 1: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 00:14:02 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x1000000}) 00:14:02 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x80, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2d}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9b}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20040094}, 0x20000000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) 00:14:02 executing program 1: io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0x3, 0x2}) 00:14:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 00:14:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf250b0000002800038014000600fc010000000000000000000000000001080003000400000008000300020000001c00028008000400000000f2060002004e21000006000e004e21000008000500f9ffffff0000000000000000080000000600040003ac000006000400000000000800030000000000140002006e723000000000000000000000000000060007004e220000080005000000000008000600ff000000"], 0xb0}, 0x1, 0x0, 0x0, 0x84d2432dabd1804a}, 0x8000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x2000000}) 00:14:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x6000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 3: io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8, 0x0, 0x2}) 00:14:03 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x80, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2d}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9b}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20040094}, 0x20000000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, r1, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x80, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2d}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9b}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20040094}, 0x20000000) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) (async) 00:14:03 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x90) 00:14:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf250b0000002800038014000600fc010000000000000000000000000001080003000400000008000300020000001c00028008000400000000f2060002004e21000006000e004e21000008000500f9ffffff0000000000000000080000000600040003ac000006000400000000000800030000000000140002006e723000000000000000000000000000060007004e220000080005000000000008000600ff000000"], 0xb0}, 0x1, 0x0, 0x0, 0x84d2432dabd1804a}, 0x8000) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000ffdbdf250b0000002800038014000600fc010000000000000000000000000001080003000400000008000300020000001c00028008000400000000f2060002004e21000006000e004e21000008000500f9ffffff0000000000000000080000000600040003ac000006000400000000000800030000000000140002006e723000000000000000000000000000060007004e220000080005000000000008000600ff000000"], 0xb0}, 0x1, 0x0, 0x0, 0x84d2432dabd1804a}, 0x8000) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) (async) 00:14:03 executing program 0: io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0xffffffff, 0x8}) 00:14:03 executing program 1: r0 = syz_io_uring_complete(0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000200)={"6d963d043ee3017ddba5d6462cc813aa4ea76343edac28e0c0777fcd6dd2", 0x5, 0x0, 0x1, 0x10001, 0x69b, 0x6063, 0x129, 0x2, [0x36, 0x0, 0x7, 0x1600, 0x0, 0x1, 0x7, 0x7, 0x5, 0x3f, 0x3f, 0xffffff81, 0x1f, 0x8001, 0x100, 0x2, 0x8, 0x6, 0x2]}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0xfffffff9, 0xb, 0x4, 0x70000, 0x81, {0x77359400}, {0x3, 0x0, 0x7, 0x7, 0x1f, 0x8, "ce486f3e"}, 0xfff00000, 0x3, {&(0x7f0000000340)=[{0x1, 0x1, {0x3f}, 0x200}, {0x365fabd8, 0x4, {0xff}, 0x6}]}, 0x8001, 0x0, r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4e06d5c8802eebd76efa58bb47d58cab26c744268b09938467e4e2f5e10903004a60483ded5eac8668f6fe3e38a299eaf241751c0c3bea413a3f7cc019c9916d8fad3fd2901151c6860081db7daebadc0779", @ANYRES16=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x8050}, 0x8080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd71}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x40) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xee}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}]}, 0xb4}}, 0x40000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 00:14:03 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x2040000}) 00:14:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x90) 00:14:03 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x158, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd6}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x7f}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfeff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x24008000}, 0x24004080) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x94, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9a}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x30040811) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x467e}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40004) 00:14:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x34000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1c0b000000000000000002000004"], 0x14}}, 0x0) 00:14:03 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x90) 00:14:03 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x3000000}) 00:14:03 executing program 0: r0 = syz_io_uring_complete(0x0) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000200)={"6d963d043ee3017ddba5d6462cc813aa4ea76343edac28e0c0777fcd6dd2", 0x5, 0x0, 0x1, 0x10001, 0x69b, 0x6063, 0x129, 0x2, [0x36, 0x0, 0x7, 0x1600, 0x0, 0x1, 0x7, 0x7, 0x5, 0x3f, 0x3f, 0xffffff81, 0x1f, 0x8001, 0x100, 0x2, 0x8, 0x6, 0x2]}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0xfffffff9, 0xb, 0x4, 0x70000, 0x81, {0x77359400}, {0x3, 0x0, 0x7, 0x7, 0x1f, 0x8, "ce486f3e"}, 0xfff00000, 0x3, {&(0x7f0000000340)=[{0x1, 0x1, {0x3f}, 0x200}, {0x365fabd8, 0x4, {0xff}, 0x6}]}, 0x8001, 0x0, r0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4e06d5c8802eebd76efa58bb47d58cab26c744268b09938467e4e2f5e10903004a60483ded5eac8668f6fe3e38a299eaf241751c0c3bea413a3f7cc019c9916d8fad3fd2901151c6860081db7daebadc0779", @ANYRES16=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x8050}, 0x8080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd71}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x40) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xee}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}]}, 0xb4}}, 0x40000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) syz_io_uring_complete(0x0) (async) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000200)={"6d963d043ee3017ddba5d6462cc813aa4ea76343edac28e0c0777fcd6dd2", 0x5, 0x0, 0x1, 0x10001, 0x69b, 0x6063, 0x129, 0x2, [0x36, 0x0, 0x7, 0x1600, 0x0, 0x1, 0x7, 0x7, 0x5, 0x3f, 0x3f, 0xffffff81, 0x1f, 0x8001, 0x100, 0x2, 0x8, 0x6, 0x2]}) (async) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000003c0)=@multiplanar_overlay={0xfffffff9, 0xb, 0x4, 0x70000, 0x81, {0x77359400}, {0x3, 0x0, 0x7, 0x7, 0x1f, 0x8, "ce486f3e"}, 0xfff00000, 0x3, {&(0x7f0000000340)=[{0x1, 0x1, {0x3f}, 0x200}, {0x365fabd8, 0x4, {0xff}, 0x6}]}, 0x8001, 0x0, r0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4e06d5c8802eebd76efa58bb47d58cab26c744268b09938467e4e2f5e10903004a60483ded5eac8668f6fe3e38a299eaf241751c0c3bea413a3f7cc019c9916d8fad3fd2901151c6860081db7daebadc0779", @ANYRES16=0x0, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x8050}, 0x8080) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd71}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x40) (async) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xee}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}]}]}, 0xb4}}, 0x40000800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) (async) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) (async) 00:14:03 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x158, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd6}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x7f}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfeff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x24008000}, 0x24004080) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x94, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9a}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x30040811) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x467e}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40004) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x158, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd6}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x7f}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfeff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x24008000}, 0x24004080) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x94, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9a}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x30040811) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x467e}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x40004) (async) 00:14:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1c0b000000000000000002000004"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1c0b000000000000000002000004"], 0x14}}, 0x0) (async) 00:14:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x400300, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x90) 00:14:03 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x4000000}) 00:14:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000500", @ANYRES32=r0, @ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4840) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 2: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0xc, &(0x7f00000005c0)=""/48) 00:14:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x90) 00:14:03 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xa, &(0x7f0000000180)={&(0x7f0000000280)={0x14, r0, 0x100, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x0, 0x2, 0xf78}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0xc95}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x40}, @TIPC_NLA_PROP_WIN]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x0, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x711}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x800000}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0xc3}]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x0, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL]}, @TIPC_NLA_BEARER={0x0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x0, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x40085) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x78, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x52fe445f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x100000d0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa4, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x89}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x76}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x9}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008e1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a40)={0x290, r0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea0e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0xfffffffffffffdc2, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb5}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb8b6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa68d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x19c}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf72}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfa9}, @TIPC_NLA_NODE_ID={0x17, 0x3, "335d46275495b5205aba979330590c56310ea4"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "34f401df4da92a3f4ee3b495791b8e8f78265a32a5053b4d36f4c20b6d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x93e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xeb}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x80}, 0x60004840) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0xe4, r0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x365}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0xe4}}, 0x40) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r4) 00:14:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x1000000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0xc, &(0x7f00000005c0)=""/48) 00:14:03 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x6040000}) 00:14:03 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x90) 00:14:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000500", @ANYRES32=r0, @ANYRESOCT=r0], 0x4c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4840) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0x1}, 0x0, 0x0}, 0x20) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa0400, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000080)=0x315) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:03 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xa, &(0x7f0000000180)={&(0x7f0000000280)={0x14, r0, 0x100, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x0, 0x2, 0xf78}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0xc95}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0x40}, @TIPC_NLA_PROP_WIN]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x0, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x0, 0x3, 0x711}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x800000}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0xc3}]}, @TIPC_NLA_LINK_PROP={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0xffffffff}]}, @TIPC_NLA_LINK_NAME={0x0, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0x0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL]}, @TIPC_NLA_BEARER={0x0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x0, 0x1, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}]}]}, 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x40085) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x78, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x52fe445f}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x100000d0) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa4, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x89}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x76}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x9}}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000010}, 0x40008e1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000900)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a40)={0x290, r0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xea0e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0xfffffffffffffdc2, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb5}, @TIPC_NLA_CON_NODE={0x0, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb8b6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa68d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x19c}]}]}, @TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf72}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfa9}, @TIPC_NLA_NODE_ID={0x17, 0x3, "335d46275495b5205aba979330590c56310ea4"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "34f401df4da92a3f4ee3b495791b8e8f78265a32a5053b4d36f4c20b6d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x93e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xeb}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x80}, 0x60004840) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0xe4, r0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x365}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0xe4}}, 0x40) (async) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x1}, 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r4) 00:14:03 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0xc, &(0x7f00000005c0)=""/48) 00:14:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x2000000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00'}, 0x90) 00:14:03 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x7000000}) 00:14:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x3000000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r1, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}, 0x55}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240000a0}, 0x800) 00:14:03 executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0xc, &(0x7f00000005c0)=""/48) 00:14:03 executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0xc, &(0x7f00000005c0)=""/48) 00:14:03 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00'}, 0x90) 00:14:03 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x8000000}) 00:14:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r1, 0xb1c}, 0x14}}, 0x400c0d0) 00:14:03 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r1, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}, 0x55}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240000a0}, 0x800) 00:14:03 executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0xc, &(0x7f00000005c0)=""/48) 00:14:03 executing program 4: shmctl$IPC_INFO(0x0, 0xc, &(0x7f00000005c0)=""/48) 00:14:03 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000400)='GPL\x00'}, 0x90) 00:14:03 executing program 4: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000100)) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r1, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0xd}, 0x55}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240000a0}, 0x800) 00:14:03 executing program 1: shmctl$IPC_INFO(0x0, 0xc, 0x0) 00:14:03 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0xf000000}) 00:14:03 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r1, 0xb1c}, 0x14}}, 0x400c0d0) 00:14:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x4000000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$rxrpc(r1, 0x0, 0x0) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x334d, 0x40, 0xffdfffff, 0x319, 0x0, r1}) 00:14:03 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x11000000}) 00:14:03 executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0x1}, 0x0, 0x0}, 0x20) (async) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa0400, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000080)=0x315) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:03 executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0xd, &(0x7f00000005c0)=""/48) 00:14:03 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bind$rxrpc(r1, 0x0, 0x0) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x334d, 0x40, 0xffdfffff, 0x319, 0x0, r1}) 00:14:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x7000000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="f2ffff17", @ANYRES16=0x0, @ANYBLOB="1cff9c35df1147779d48020000006f1926ea099a696e7d5c"], 0x14}}, 0x0) 00:14:03 executing program 2: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r4 = gettid() r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, r5, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xd, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x6a}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe6ea}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x4a}], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x7d, &(0x7f0000000100)=""/125, 0x41100, 0x2, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x10, 0x9, 0x7f}, 0x10, 0x20465, r5, 0x2, &(0x7f0000000240)=[r0], &(0x7f0000000280)=[{0x3, 0x1, 0x0, 0x1}, {0x3, 0x5, 0x7, 0x6}], 0x10, 0x1}, 0x90) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:03 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000, 0x0, 0x22000000}) 00:14:03 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="5545c468549417cc835ddcf6b274f69d5d87e3a4d9231e406f050e90cb217af02d4ad95f1844d52fbae13c13da8fd754e7d90b436c51088849f067cf48120d3c5cb18c181ecdb30f9a429597175a4f41e9b7a784471e39ff98bee3c314253f94fb35c0f11a19e7b78ddc4f5bb8118a50a01efd7bb23c73a3c14f6de94257cc60e30887ac7a6e76592281e7bbce2ba5ea763adb65e21e74e1d0da694fe26b5e73f0233b857ee4244309abf3f347e501d91e2cb3c3faa3320c2da1e9c515b31de2eb3c5620935bbc4317dcb22db084beee1cad0d918784497160b89564c9feda3f0ffd82767d613ff8310fa1"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="02002dbd7000fedbdf25020000004c00038014000600ff020000000000000000000000000001080001000100000005000800df00000014000600000000000000000000000000000000010800030000000000060007004e2400002400028008000700ff010000080003000100000006000e004e23000006000b000a000000080005004f00000008000400ff0100000800040000000000ae889c952b2f4408fb49aace3f"], 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x97ec, 0x2000}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) 00:14:03 executing program 4: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0xe, &(0x7f00000005c0)=""/48) 00:14:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x8000000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="f2ffff17", @ANYRES16=0x0, @ANYBLOB="1cff9c35df1147779d48020000006f1926ea099a696e7d5c"], 0x14}}, 0x0) 00:14:03 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r4 = gettid() r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r4, r5, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0xd, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x6a}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe6ea}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x4a}], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x7d, &(0x7f0000000100)=""/125, 0x41100, 0x2, '\x00', r2, 0x0, r3, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x10, 0x9, 0x7f}, 0x10, 0x20465, r5, 0x2, &(0x7f0000000240)=[r0], &(0x7f0000000280)=[{0x3, 0x1, 0x0, 0x1}, {0x3, 0x5, 0x7, 0x6}], 0x10, 0x1}, 0x90) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:03 executing program 3: setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) bind$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x3ff, @mcast2}}, 0x24) 00:14:03 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="5545c468549417cc835ddcf6b274f69d5d87e3a4d9231e406f050e90cb217af02d4ad95f1844d52fbae13c13da8fd754e7d90b436c51088849f067cf48120d3c5cb18c181ecdb30f9a429597175a4f41e9b7a784471e39ff98bee3c314253f94fb35c0f11a19e7b78ddc4f5bb8118a50a01efd7bb23c73a3c14f6de94257cc60e30887ac7a6e76592281e7bbce2ba5ea763adb65e21e74e1d0da694fe26b5e73f0233b857ee4244309abf3f347e501d91e2cb3c3faa3320c2da1e9c515b31de2eb3c5620935bbc4317dcb22db084beee1cad0d918784497160b89564c9feda3f0ffd82767d613ff8310fa1"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) (async) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r2, @ANYBLOB="02002dbd7000fedbdf25020000004c00038014000600ff020000000000000000000000000001080001000100000005000800df00000014000600000000000000000000000000000000010800030000000000060007004e2400002400028008000700ff010000080003000100000006000e004e23000006000b000a000000080005004f00000008000400ff0100000800040000000000ae889c952b2f4408fb49aace3f"], 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x97ec, 0x2000}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r1) 00:14:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0xf000000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 2: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0xe, &(0x7f00000005c0)=""/48) 00:14:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cf0dca09edbdf250300000008000500bf7f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x28804}, 0x8084) 00:14:03 executing program 4: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, 0x0) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/94) 00:14:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x14000000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:03 executing program 2: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000082", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) r2 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x2848, &(0x7f00000000c0)={0x0, 0xa48c, 0x4, 0x2, 0x132, 0x0, r2}) 00:14:03 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0xf, &(0x7f00000005c0)=""/48) 00:14:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cf0dca09edbdf250300000008000500bf7f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x28804}, 0x8084) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00022cf0dca09edbdf250300000008000500bf7f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x28804}, 0x8084) (async) 00:14:04 executing program 0: setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x270, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x50000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x83}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa2, 0x3, "b6f05b5306ff89b793ab22c93298415b1c1e4f16b65a468f4fbb5cfa8541382649a6b8cb87c7057d38eea944d4775bbdcd0c357c0ca035b5e610806dae49f09c34da390be5d881a1f048462ad9f630b553b50e09b3a101bdc4c330eee0a4d52d307719fd41bf7ee24fd0ad120568b78ef097295d8aa5768a8b6589b1d8442edda2fd159ced2d0f7a6491b6fa98a5cb2663c6dec2f5941aa477815d76d182"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "72ee1a263618745a8645a2c09181f10118a04f387049f381"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9d99}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xcad}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x40}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x106}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00', 0x3f}}}}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x48040}, 0x20000010) 00:14:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x24000000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 4: setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) 00:14:04 executing program 2: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, 0x0) (async) shmctl$IPC_INFO(r1, 0x3, 0x0) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/94) (async) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000000c0)=""/94) 00:14:04 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000082", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) (async, rerun: 64) r2 = io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x2848, &(0x7f00000000c0)={0x0, 0xa48c, 0x4, 0x2, 0x132, 0x0, r2}) 00:14:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000c2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x28}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8001}, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 1: setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x270, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x50000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x83}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa2, 0x3, "b6f05b5306ff89b793ab22c93298415b1c1e4f16b65a468f4fbb5cfa8541382649a6b8cb87c7057d38eea944d4775bbdcd0c357c0ca035b5e610806dae49f09c34da390be5d881a1f048462ad9f630b553b50e09b3a101bdc4c330eee0a4d52d307719fd41bf7ee24fd0ad120568b78ef097295d8aa5768a8b6589b1d8442edda2fd159ced2d0f7a6491b6fa98a5cb2663c6dec2f5941aa477815d76d182"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "72ee1a263618745a8645a2c09181f10118a04f387049f381"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9d99}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xcad}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x40}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x106}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00', 0x3f}}}}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x48040}, 0x20000010) 00:14:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x4d140000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 2: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, r5, r6, r7, r0, r8], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', r1, r2, 0x1, 0x2, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r5, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000bc0)=@raw=[@generic={0x0, 0xc, 0x6, 0x1ff}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x91}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x7f, 0xa, 0x0, 0x757, 0x9}], &(0x7f0000000940)='syzkaller\x00', 0xcdc4, 0xfffffd03, &(0x7f0000000980)=""/40, 0x41100, 0x64, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0x2, 0xb2a1, 0xce3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r4, r2, r9, r6], 0x0, 0x10, 0x3}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0001000100000000800000014d9a00740068000005009078ac14141c00000000440c19536401010100000002072b1e640101017f0000010a01010100000000ac1414bbe000df02ffffffff640101000af96179010101ac141426441c7f11ac1414bb000000080000000000000100640101000000000001440cc3200001000100000be9"]}) 00:14:04 executing program 1: syz_open_pts(0xffffffffffffffff, 0x4a0080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:04 executing program 4: r0 = io_uring_setup(0x210f, &(0x7f0000000000)={0x0, 0x4e4, 0x800, 0x0, 0x103}) io_uring_setup(0x5000, &(0x7f0000000080)={0x0, 0xd3b4, 0x80, 0x3, 0x31a, 0x0, r0}) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, 0x0, 0x0) 00:14:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) 00:14:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000c2) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x28}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8001}, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000c2) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x140, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x81}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x3d}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x28}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x8001}, 0x1) (async, rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="00010000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000140)) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x3, 0x2000, 0x1, 0x0, 0x0, r1}) 00:14:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x60000000, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 4: syz_open_pts(0xffffffffffffffff, 0x4a0080) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) (async) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:04 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="00010000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000140)) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x3, 0x2000, 0x1, 0x0, 0x0, r1}) 00:14:04 executing program 3: r0 = io_uring_setup(0x210f, &(0x7f0000000000)={0x0, 0x4e4, 0x800, 0x0, 0x103}) io_uring_setup(0x5000, &(0x7f0000000080)={0x0, 0xd3b4, 0x80, 0x3, 0x31a, 0x0, r0}) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, 0x0, 0x0) 00:14:04 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xa94042, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) socket$nl_generic(0x10, 0x3, 0x10) 00:14:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0xf0ffffff, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) [ 844.326718][ T6184] Bluetooth: hci2: command 0x0405 tx timeout 00:14:04 executing program 2: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x4020940d, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000640)={@mcast2, 0x0}, &(0x7f0000000680)=0x14) r3 = syz_io_uring_complete(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@lu}]}, &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, &(0x7f0000000600), 0x41100, 0x71, '\x00', r2, 0x1c, r1, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x10, 0x3f, 0x6}, 0x10, 0x11c29, r1, 0x2, &(0x7f0000000740)=[r0, r0, r1, r0, r3, r0, r0, r1, r0, r0], &(0x7f0000000780)=[{0x1, 0x2, 0xf, 0xa}, {0x3, 0x1, 0x9, 0x7}], 0x10, 0x4}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1f, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x1, 0x0, 0x8, 0x2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0xd, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x80000000}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x75, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x7, 0xec7c, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000003c0)=[{0x4, 0x3, 0xa, 0x4}, {0x4, 0x3, 0xf, 0xc}, {0x3, 0x2, 0xf, 0x6}, {0x2, 0x3, 0xf, 0x7}, {0x2, 0x3, 0x1, 0x1}, {0x5, 0x3, 0x4, 0x9}], 0x10, 0x6}, 0x90) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:04 executing program 0: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, r5, r6, r7, r0, r8], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', r1, r2, 0x1, 0x2, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r5, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000bc0)=@raw=[@generic={0x0, 0xc, 0x6, 0x1ff}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x91}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x7f, 0xa, 0x0, 0x757, 0x9}], &(0x7f0000000940)='syzkaller\x00', 0xcdc4, 0xfffffd03, &(0x7f0000000980)=""/40, 0x41100, 0x64, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0x2, 0xb2a1, 0xce3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r4, r2, r9, r6], 0x0, 0x10, 0x3}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0001000100000000800000014d9a00740068000005009078ac14141c00000000440c19536401010100000002072b1e640101017f0000010a01010100000000ac1414bbe000df02ffffffff640101000af96179010101ac141426441c7f11ac1414bb000000080000000000000100640101000000000001440cc3200001000100000be9"]}) 00:14:04 executing program 3: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, r5, r6, r7, r0, r8], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', r1, r2, 0x1, 0x2, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r5, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000bc0)=@raw=[@generic={0x0, 0xc, 0x6, 0x1ff}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x91}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x7f, 0xa, 0x0, 0x757, 0x9}], &(0x7f0000000940)='syzkaller\x00', 0xcdc4, 0xfffffd03, &(0x7f0000000980)=""/40, 0x41100, 0x64, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0x2, 0xb2a1, 0xce3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r4, r2, r9, r6], 0x0, 0x10, 0x3}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0001000100000000800000014d9a00740068000005009078ac14141c00000000440c19536401010100000002072b1e640101017f0000010a01010100000000ac1414bbe000df02ffffffff640101000af96179010101ac141426441c7f11ac1414bb000000080000000000000100640101000000000001440cc3200001000100000be9"]}) 00:14:04 executing program 2: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xa94042, 0x0) (async) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0xa94042, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) socket$nl_generic(0x10, 0x3, 0x10) 00:14:04 executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x4020940d, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x4020940d, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000640)={@mcast2, 0x0}, &(0x7f0000000680)=0x14) syz_io_uring_complete(0x0) (async) r3 = syz_io_uring_complete(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@lu}]}, &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, &(0x7f0000000600), 0x41100, 0x71, '\x00', r2, 0x1c, r1, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x10, 0x3f, 0x6}, 0x10, 0x11c29, r1, 0x2, &(0x7f0000000740)=[r0, r0, r1, r0, r3, r0, r0, r1, r0, r0], &(0x7f0000000780)=[{0x1, 0x2, 0xf, 0xa}, {0x3, 0x1, 0x9, 0x7}], 0x10, 0x4}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x1f, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x1, 0x0, 0x8, 0x2}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_val={0x18, 0xd, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x80000000}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x75, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x7, 0xec7c, 0x2}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000003c0)=[{0x4, 0x3, 0xa, 0x4}, {0x4, 0x3, 0xf, 0xc}, {0x3, 0x2, 0xf, 0x6}, {0x2, 0x3, 0xf, 0x7}, {0x2, 0x3, 0x1, 0x1}, {0x5, 0x3, 0x4, 0x9}], 0x10, 0x6}, 0x90) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:04 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000006ffef8b4d72f664a89746df01ebc5a25b77554f69159c5a848ca475fde104ad59b38e486022d3cacb7afe65f6f724eb88ce205bc1e3ba7d54e21000000b3e9ce5e2b548ae2e985b5e7ae16e05a12efe86a12c36a758d70c4a66b1a335f68d84fb458e84095143d57177614319197421d9cf94a7a42b1df1f0ed17fe61e71a04935ae2619e249f4e01da8cc9dd8c04f23e0c58ab3a29217b5ab537a05b6c46e8d0dea18ee0c3f10349e", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0xffffff7f, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000006ffef8b4d72f664a89746df01ebc5a25b77554f69159c5a848ca475fde104ad59b38e486022d3cacb7afe65f6f724eb88ce205bc1e3ba7d54e21000000b3e9ce5e2b548ae2e985b5e7ae16e05a12efe86a12c36a758d70c4a66b1a335f68d84fb458e84095143d57177614319197421d9cf94a7a42b1df1f0ed17fe61e71a04935ae2619e249f4e01da8cc9dd8c04f23e0c58ab3a29217b5ab537a05b6c46e8d0dea18ee0c3f10349e", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000006ffef8b4d72f664a89746df01ebc5a25b77554f69159c5a848ca475fde104ad59b38e486022d3cacb7afe65f6f724eb88ce205bc1e3ba7d54e21000000b3e9ce5e2b548ae2e985b5e7ae16e05a12efe86a12c36a758d70c4a66b1a335f68d84fb458e84095143d57177614319197421d9cf94a7a42b1df1f0ed17fe61e71a04935ae2619e249f4e01da8cc9dd8c04f23e0c58ab3a29217b5ab537a05b6c46e8d0dea18ee0c3f10349e", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) (async) 00:14:04 executing program 3: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, r5, r6, r7, r0, r8], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', r1, r2, 0x1, 0x2, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r5, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000bc0)=@raw=[@generic={0x0, 0xc, 0x6, 0x1ff}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x91}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x7f, 0xa, 0x0, 0x757, 0x9}], &(0x7f0000000940)='syzkaller\x00', 0xcdc4, 0xfffffd03, &(0x7f0000000980)=""/40, 0x41100, 0x64, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0x2, 0xb2a1, 0xce3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r4, r2, r9, r6], 0x0, 0x10, 0x3}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0001000100000000800000014d9a00740068000005009078ac14141c00000000440c19536401010100000002072b1e640101017f0000010a01010100000000ac1414bbe000df02ffffffff640101000af96179010101ac141426441c7f11ac1414bb000000080000000000000100640101000000000001440cc3200001000100000be9"]}) 00:14:04 executing program 1: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, r5, r6, r7, r0, r8], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', r1, r2, 0x1, 0x2, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r5, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000bc0)=@raw=[@generic={0x0, 0xc, 0x6, 0x1ff}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x91}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x7f, 0xa, 0x0, 0x757, 0x9}], &(0x7f0000000940)='syzkaller\x00', 0xcdc4, 0xfffffd03, &(0x7f0000000980)=""/40, 0x41100, 0x64, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0x2, 0xb2a1, 0xce3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r4, r2, r9, r6], 0x0, 0x10, 0x3}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0001000100000000800000014d9a00740068000005009078ac14141c00000000440c19536401010100000002072b1e640101017f0000010a01010100000000ac1414bbe000df02ffffffff640101000af96179010101ac141426441c7f11ac1414bb000000080000000000000100640101000000000001440cc3200001000100000be9"]}) 00:14:04 executing program 2: shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x5c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2b, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000880) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xf0, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0xffffffffffffff63}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0xf0}}, 0xc0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1c0b00000000000000000200000000002e000100000008002c000101000005003000000000b5c470b8a227e83600"], 0xfffffffd}, 0x1, 0x0, 0x0, 0x4040000}, 0x4010) 00:14:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0xfffffff0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 2: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x0) 00:14:04 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x218, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x48}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47df}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20000010}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pK \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x48) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r3) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd431}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000fa9fe4bbb27a9bb7239ceb09dbb1edbd9c1eec774a94c5bf22309b58a3297398640f9b9d3606c9b58a65ccd751c45296b3a38a1fcc6e343f3f2df5e1cc5c5c0d1a2344224e33acd7ad0d40d9ac5e5231c4be7a97a9769ca04cd7ac6fee5ceb4026919481aa55544ada55f8e849a325fef27d2321dc22c09869fac7c3119d22d2767affb2c9afc32c1ec0024189dc7ce8", @ANYRES16=r0, @ANYBLOB="0001000007000000df2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:04 executing program 1: shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:04 executing program 4: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, r5, r6, r7, r0, r8], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', r1, r2, 0x1, 0x2, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r5, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000bc0)=@raw=[@generic={0x0, 0xc, 0x6, 0x1ff}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x91}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x7f, 0xa, 0x0, 0x757, 0x9}], &(0x7f0000000940)='syzkaller\x00', 0xcdc4, 0xfffffd03, &(0x7f0000000980)=""/40, 0x41100, 0x64, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0x2, 0xb2a1, 0xce3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r4, r2, r9, r6], 0x0, 0x10, 0x3}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0001000100000000800000014d9a00740068000005009078ac14141c00000000440c19536401010100000002072b1e640101017f0000010a01010100000000ac1414bbe000df02ffffffff640101000af96179010101ac141426441c7f11ac1414bb000000080000000000000100640101000000000001440cc3200001000100000be9"]}) 00:14:04 executing program 2: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, r5, r6, r7, r0, r8], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', r1, r2, 0x1, 0x2, 0x3}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r5, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000bc0)=@raw=[@generic={0x0, 0xc, 0x6, 0x1ff}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x91}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x7f, 0xa, 0x0, 0x757, 0x9}], &(0x7f0000000940)='syzkaller\x00', 0xcdc4, 0xfffffd03, &(0x7f0000000980)=""/40, 0x41100, 0x64, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0x2, 0xb2a1, 0xce3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r4, r2, r9, r6], 0x0, 0x10, 0x3}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0001000100000000800000014d9a00740068000005009078ac14141c00000000440c19536401010100000002072b1e640101017f0000010a01010100000000ac1414bbe000df02ffffffff640101000af96179010101ac141426441c7f11ac1414bb000000080000000000000100640101000000000001440cc3200001000100000be9"]}) 00:14:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x5c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2b, 0x18}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000880) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xf0, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0xffffffffffffff63}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0xf0}}, 0xc0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1c0b00000000000000000200000000002e000100000008002c000101000005003000000000b5c470b8a227e83600"], 0xfffffffd}, 0x1, 0x0, 0x0, 0x4040000}, 0x4010) 00:14:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x10, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0xb, &(0x7f00000001c0)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0x7, 0x6, 0xfbb94bf467929508, 0x0, 0x1}], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x56d8460302c79b0c, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280)=[{0x5, 0x1, 0xd, 0xb}, {0x3, 0x3, 0xa, 0xa}, {0x4, 0x1, 0x6, 0xe}, {0x0, 0x5, 0xd, 0x9}, {0x1, 0x1, 0x5}, {0x2, 0x3, 0xd, 0x4}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb334}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2e, 0x1000, &(0x7f0000000600)=""/4096, 0x40f00, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0x79, 0xc5}, 0x10, 0x1cee2, r4, 0x6, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0x0, 0x9}, {0x4, 0x1, 0x0, 0xb}, {0x1, 0x80d6, 0x3, 0xc}, {0x2, 0x2, 0xc, 0x1}, {0x5, 0x2, 0x9, 0x5}, {0x1, 0x1, 0x2, 0x9}], 0x10, 0x8}, 0x90) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:04 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={&(0x7f0000000300), 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x218, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_SOCK={0xbc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xbd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x48}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47df}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20000010}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pK \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x48) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r3) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd431}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x805}, 0x4000000) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000fa9fe4bbb27a9bb7239ceb09dbb1edbd9c1eec774a94c5bf22309b58a3297398640f9b9d3606c9b58a65ccd751c45296b3a38a1fcc6e343f3f2df5e1cc5c5c0d1a2344224e33acd7ad0d40d9ac5e5231c4be7a97a9769ca04cd7ac6fee5ceb4026919481aa55544ada55f8e849a325fef27d2321dc22c09869fac7c3119d22d2767affb2c9afc32c1ec0024189dc7ce8", @ANYRES16=r0, @ANYBLOB="0001000007000000df2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) (async) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x140, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 3: r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x0) (async) 00:14:04 executing program 1: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, r5, r6, r7, r0, r8], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:04 executing program 4: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90) (async, rerun: 32) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0xb, &(0x7f00000001c0)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0x7, 0x6, 0xfbb94bf467929508, 0x0, 0x1}], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x56d8460302c79b0c, 0x8, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280)=[{0x5, 0x1, 0xd, 0xb}, {0x3, 0x3, 0xa, 0xa}, {0x4, 0x1, 0x6, 0xe}, {0x0, 0x5, 0xd, 0x9}, {0x1, 0x1, 0x5}, {0x2, 0x3, 0xd, 0x4}], 0x10, 0x4}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb334}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2e, 0x1000, &(0x7f0000000600)=""/4096, 0x40f00, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xc, 0x79, 0xc5}, 0x10, 0x1cee2, r4, 0x6, 0x0, &(0x7f00000003c0)=[{0x1, 0x2, 0x0, 0x9}, {0x4, 0x1, 0x0, 0xb}, {0x1, 0x80d6, 0x3, 0xc}, {0x2, 0x2, 0xc, 0x1}, {0x5, 0x2, 0x9, 0x5}, {0x1, 0x1, 0x2, 0x9}], 0x10, 0x8}, 0x90) (async, rerun: 32) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) (rerun: 32) 00:14:04 executing program 0: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) 00:14:04 executing program 3: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0xec0, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 0: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, r5, r6, r7, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:04 executing program 4: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) 00:14:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x40049409, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, 0x0) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/32) 00:14:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x33fe0, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 3: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, r5, r6, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:04 executing program 4: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:04 executing program 1: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) 00:14:04 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x40049409, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20) r1 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_INFO(r1, 0x3, 0x0) (async) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/32) 00:14:04 executing program 4: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) 00:14:04 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_setup(0x407650, &(0x7f0000000200)={0x0, 0x2, 0x200, 0x1, 0x4c, 0x0, r2}) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000100)=0x51) 00:14:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7a}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 00:14:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0xfffffdef, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:04 executing program 1: syz_io_uring_complete(0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x51) 00:14:04 executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x0, '\x00', r1, r2, 0x3, 0x4, 0x2}, 0x48) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r2) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r1, r2, 0x4, 0x0, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1b, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf33, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x7, 0x1, 0x3, 0x0, 0x6, 0x40, 0x4}, @alu={0x7, 0x0, 0x1, 0x0, 0x2, 0x2, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}]}, &(0x7f0000000300)='GPL\x00', 0x1, 0xd0, &(0x7f0000000340)=""/208, 0x40f00, 0x2, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000440)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x3, 0x87}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r0, r3, r3, r6, r3, r2, r2], &(0x7f0000000580)=[{0x5, 0x3, 0x7, 0x2}], 0x10, 0x4}, 0x90) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:04 executing program 4: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) 00:14:05 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r0, 0x100, 0x0, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) io_uring_setup(0x407650, &(0x7f0000000200)={0x0, 0x2, 0x200, 0x1, 0x4c, 0x0, r2}) ioctl$SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, &(0x7f0000000100)=0x51) 00:14:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7a}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7a}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) 00:14:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) 00:14:05 executing program 4: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x0, '\x00', r1, r2, 0x3, 0x4, 0x2}, 0x48) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x0, '\x00', r1, r2, 0x3, 0x4, 0x2}, 0x48) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r2) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', r1, r2, 0x4, 0x0, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1b, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf33, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x7, 0x1, 0x3, 0x0, 0x6, 0x40, 0x4}, @alu={0x7, 0x0, 0x1, 0x0, 0x2, 0x2, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}]}, &(0x7f0000000300)='GPL\x00', 0x1, 0xd0, &(0x7f0000000340)=""/208, 0x40f00, 0x2, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000440)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x3, 0x87}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r0, r3, r3, r6, r3, r2, r2], &(0x7f0000000580)=[{0x5, 0x3, 0x7, 0x2}], 0x10, 0x4}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1b, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf33, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x7, 0x1, 0x3, 0x0, 0x6, 0x40, 0x4}, @alu={0x7, 0x0, 0x1, 0x0, 0x2, 0x2, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}]}, &(0x7f0000000300)='GPL\x00', 0x1, 0xd0, &(0x7f0000000340)=""/208, 0x40f00, 0x2, '\x00', r1, 0x25, r2, 0x8, &(0x7f0000000440)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x3, 0x87}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r0, r3, r3, r6, r3, r2, r2], &(0x7f0000000580)=[{0x5, 0x3, 0x7, 0x2}], 0x10, 0x4}, 0x90) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000005c0)=""/48) 00:14:05 executing program 2: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:05 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) 00:14:05 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB='\x00'/11], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000007aae4de664047c1c091874", @ANYRES16=0x0, @ANYBLOB="1c0b000000000000000002000000"], 0x14}}, 0x0) 00:14:05 executing program 1: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c, 0x2}, 0x14}}, 0x0) 00:14:05 executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/58) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x101}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}, @map_val={0x18, 0x4, 0x2, 0x0, r0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x78, &(0x7f0000000100)=""/120, 0x41100, 0x4, '\x00', r1, 0x1b, r2, 0x8, &(0x7f00000001c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xe, 0xffffffd3, 0xe119}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000240)=[r0, r0, r0, r0, r0], &(0x7f0000000280)=[{0x4, 0x5, 0xe}, {0x3, 0x3, 0x5}, {0x1, 0x4, 0x10, 0x3}], 0x10, 0x2abcea9d}, 0x90) 00:14:05 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) 00:14:05 executing program 1: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB='\x00'/11], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:05 executing program 2: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000007aae4de664047c1c091874", @ANYRES16=0x0, @ANYBLOB="1c0b000000000000000002000000"], 0x14}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000007aae4de664047c1c091874", @ANYRES16=0x0, @ANYBLOB="1c0b000000000000000002000000"], 0x14}}, 0x0) 00:14:05 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) 00:14:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c, 0x3}, 0x14}}, 0x0) 00:14:05 executing program 3: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:05 executing program 4: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/58) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r2 = syz_io_uring_complete(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x101}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}, @map_val={0x18, 0x4, 0x2, 0x0, r0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x78, &(0x7f0000000100)=""/120, 0x41100, 0x4, '\x00', r1, 0x1b, r2, 0x8, &(0x7f00000001c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xe, 0xffffffd3, 0xe119}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000240)=[r0, r0, r0, r0, r0], &(0x7f0000000280)=[{0x4, 0x5, 0xe}, {0x3, 0x3, 0x5}, {0x1, 0x4, 0x10, 0x3}], 0x10, 0x2abcea9d}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) (async) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/58) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) syz_io_uring_complete(0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x101}, [@map_fd={0x18, 0x7, 0x1, 0x0, r0}, @map_val={0x18, 0x4, 0x2, 0x0, r0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x78, &(0x7f0000000100)=""/120, 0x41100, 0x4, '\x00', r1, 0x1b, r2, 0x8, &(0x7f00000001c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0xe, 0xffffffd3, 0xe119}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000240)=[r0, r0, r0, r0, r0], &(0x7f0000000280)=[{0x4, 0x5, 0xe}, {0x3, 0x3, 0x5}, {0x1, 0x4, 0x10, 0x3}], 0x10, 0x2abcea9d}, 0x90) (async) 00:14:05 executing program 1: syz_io_uring_complete(0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x51) syz_io_uring_complete(0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x51) (async) 00:14:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:14:05 executing program 0: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000f00", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x184, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x54}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa8e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4d39}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xecc8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4000000}]}, 0x184}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) [ 845.288802][T25330] ================================================================== [ 845.290809][T25330] BUG: KASAN: slab-use-after-free in sco_sock_timeout+0x64/0x25c [ 845.292725][T25330] Write of size 4 at addr ffff0000dc114080 by task kworker/1:25/25330 [ 845.294748][T25330] [ 845.295295][T25330] CPU: 1 PID: 25330 Comm: kworker/1:25 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 845.297758][T25330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 845.300315][T25330] Workqueue: events sco_sock_timeout [ 845.301672][T25330] Call trace: [ 845.302464][T25330] dump_backtrace+0x1b8/0x1e4 [ 845.303686][T25330] show_stack+0x2c/0x3c [ 845.304837][T25330] dump_stack_lvl+0xd0/0x124 [ 845.306021][T25330] print_report+0x178/0x518 [ 845.307184][T25330] kasan_report+0xd8/0x138 [ 845.308311][T25330] kasan_check_range+0x254/0x294 [ 845.309623][T25330] __kasan_check_write+0x20/0x30 [ 845.310852][T25330] sco_sock_timeout+0x64/0x25c [ 845.312022][T25330] process_one_work+0x694/0x1204 [ 845.313290][T25330] worker_thread+0x938/0xef4 [ 845.314552][T25330] kthread+0x288/0x310 [ 845.315641][T25330] ret_from_fork+0x10/0x20 [ 845.316707][T25330] [ 845.317275][T25330] Allocated by task 11099: [ 845.318389][T25330] kasan_save_track+0x40/0x78 [ 845.319552][T25330] kasan_save_alloc_info+0x40/0x50 [ 845.320895][T25330] __kasan_slab_alloc+0x74/0x8c [ 845.322156][T25330] kmem_cache_alloc+0x1dc/0x488 [ 845.323426][T25330] getname_flags+0xd0/0x48c [ 845.324573][T25330] __arm64_sys_unlinkat+0xb4/0xfc [ 845.325898][T25330] invoke_syscall+0x98/0x2b8 [ 845.327056][T25330] el0_svc_common+0x130/0x23c [ 845.328209][T25330] do_el0_svc+0x48/0x58 [ 845.329313][T25330] el0_svc+0x54/0x168 [ 845.330300][T25330] el0t_64_sync_handler+0x84/0xfc [ 845.331587][T25330] el0t_64_sync+0x190/0x194 [ 845.332727][T25330] [ 845.333318][T25330] Freed by task 11099: [ 845.334360][T25330] kasan_save_track+0x40/0x78 00:14:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x7, 0xc89, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8, 0x7800, 0x2d, 0x5}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) [ 845.335519][T25330] kasan_save_free_info+0x54/0x6c [ 845.336839][T25330] poison_slab_object+0x124/0x18c [ 845.338137][T25330] __kasan_slab_free+0x3c/0x70 [ 845.339521][T25330] kmem_cache_free+0x15c/0x3d4 [ 845.340768][T25330] putname+0x11c/0x180 [ 845.341861][T25330] do_rmdir+0x63c/0x720 00:14:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0x0, 0xb1c, 0x4}, 0x14}}, 0x0) [ 845.342911][T25330] __arm64_sys_unlinkat+0xe0/0xfc [ 845.344308][T25330] invoke_syscall+0x98/0x2b8 [ 845.345557][T25330] el0_svc_common+0x130/0x23c [ 845.346727][T25330] do_el0_svc+0x48/0x58 [ 845.347905][T25330] el0_svc+0x54/0x168 [ 845.348906][T25330] el0t_64_sync_handler+0x84/0xfc [ 845.350257][T25330] el0t_64_sync+0x190/0x194 [ 845.351363][T25330] [ 845.351975][T25330] The buggy address belongs to the object at ffff0000dc113300 [ 845.351975][T25330] which belongs to the cache names_cache of size 4096 [ 845.355722][T25330] The buggy address is located 3456 bytes inside of [ 845.355722][T25330] freed 4096-byte region [ffff0000dc113300, ffff0000dc114300) [ 845.359470][T25330] [ 845.360059][T25330] The buggy address belongs to the physical page: [ 845.361744][T25330] page:00000000d3aa2459 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c110 [ 845.364534][T25330] head:00000000d3aa2459 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 845.366889][T25330] anon flags: 0x5ffc00000000840(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 845.369114][T25330] page_type: 0xffffffff() [ 845.370276][T25330] raw: 05ffc00000000840 ffff0000c180e8c0 0000000000000000 dead000000000001 [ 845.372597][T25330] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 845.374894][T25330] page dumped because: kasan: bad access detected [ 845.376649][T25330] [ 845.377241][T25330] Memory state around the buggy address: [ 845.378707][T25330] ffff0000dc113f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 845.380880][T25330] ffff0000dc114000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 845.383037][T25330] >ffff0000dc114080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 845.385149][T25330] ^ [ 845.386264][T25330] ffff0000dc114100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 845.388380][T25330] ffff0000dc114180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 845.390418][T25330] ================================================================== [ 845.393056][T25330] Disabling lock debugging due to kernel taint [ 845.394701][T25330] ------------[ cut here ]------------ [ 845.396130][T25330] refcount_t: addition on 0; use-after-free. [ 845.398275][T25330] WARNING: CPU: 1 PID: 25330 at lib/refcount.c:25 refcount_warn_saturate+0x1a8/0x20c [ 845.400783][T25330] Modules linked in: [ 845.401746][T25330] CPU: 1 PID: 25330 Comm: kworker/1:25 Tainted: G B 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 845.404700][T25330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 845.407352][T25330] Workqueue: events sco_sock_timeout [ 845.408779][T25330] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 845.410822][T25330] pc : refcount_warn_saturate+0x1a8/0x20c [ 845.412376][T25330] lr : refcount_warn_saturate+0x1a8/0x20c [ 845.413894][T25330] sp : ffff800097f47af0 [ 845.415029][T25330] x29: ffff800097f47af0 x28: 1fffe00018c33b8a x27: dfff800000000000 [ 845.417151][T25330] x26: ffff0000c1084408 x25: ffff0000c619dc50 x24: ffff0001b4035700 [ 845.419265][T25330] x23: dfff800000000000 x22: 0000000000000000 x21: 0000000000000002 [ 845.421428][T25330] x20: ffff0000dc114080 x19: ffff800091cc2000 x18: ffff800097f477e0 [ 845.423546][T25330] x17: 0000000000000000 x16: ffff80008aca6b80 x15: 0000000000000001 [ 845.425697][T25330] x14: 1ffff00012fe8e78 x13: 0000000000000000 x12: 0000000000000000 [ 845.427789][T25330] x11: 0000000000000003 x10: 0000000000ff0100 x9 : 8116f52ea144d000 [ 845.429947][T25330] x8 : 8116f52ea144d000 x7 : fffffffffffe0b98 x6 : fffffffffffe0b60 [ 845.432090][T25330] x5 : ffff800097f473d8 x4 : ffff80008ed5d9a8 x3 : ffff80008036f0d8 [ 845.434251][T25330] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 845.436399][T25330] Call trace: [ 845.437277][T25330] refcount_warn_saturate+0x1a8/0x20c [ 845.438667][T25330] sco_sock_timeout+0x19c/0x25c [ 845.439958][T25330] process_one_work+0x694/0x1204 [ 845.441258][T25330] worker_thread+0x938/0xef4 [ 845.442481][T25330] kthread+0x288/0x310 [ 845.443575][T25330] ret_from_fork+0x10/0x20 [ 845.444764][T25330] irq event stamp: 212375 [ 845.445887][T25330] hardirqs last enabled at (212375): [] exit_to_kernel_mode+0xdc/0x10c [ 845.448564][T25330] hardirqs last disabled at (212374): [] __do_softirq+0x958/0xce4 [ 845.451055][T25330] softirqs last enabled at (211872): [] __do_softirq+0xac8/0xce4 [ 845.453569][T25330] softirqs last disabled at (211845): [] ____do_softirq+0x14/0x20 [ 845.456008][T25330] ---[ end trace 0000000000000000 ]--- 00:14:05 executing program 0: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) (async, rerun: 64) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async, rerun: 64) r2 = syz_io_uring_complete(0x0) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x10000, 0x52, 0x0, 0x1584, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x2, 0x4, 0x5}, 0x48) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1, 0xffffffffffffffff}, 0x4) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x48) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r3, r4, r5, r6, r7, r0, r8], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x3, '\x00', r1, r2, 0x1, 0x2, 0x3}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r5, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pS \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, &(0x7f0000000bc0)=@raw=[@generic={0x0, 0xc, 0x6, 0x1ff}, @exit, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x91}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x41c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x7f, 0xa, 0x0, 0x757, 0x9}], &(0x7f0000000940)='syzkaller\x00', 0xcdc4, 0xfffffd03, &(0x7f0000000980)=""/40, 0x41100, 0x64, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x3, 0x2, 0xb2a1, 0xce3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[r4, r2, r9, r6], 0x0, 0x10, 0x3}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0001000100000000800000014d9a00740068000005009078ac14141c00000000440c19536401010100000002072b1e640101017f0000010a01010100000000ac1414bbe000df02ffffffff640101000af96179010101ac141426441c7f11ac1414bb000000080000000000000100640101000000000001440cc3200001000100000be9"]}) 00:14:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) 00:14:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:14:05 executing program 1: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000f00", @ANYRES16=r0, @ANYBLOB="000100000000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x440c4) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x184, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffff7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1f}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x54}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa8e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x2}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4d39}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xecc8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4000000}]}, 0x184}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000480), 0x4) io_uring_setup(0x641c, &(0x7f00000004c0)={0x0, 0x0, 0x2000}) 00:14:05 executing program 2: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) 00:14:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) 00:14:05 executing program 1: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) [ 845.464853][T25330] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000 [ 845.469614][T25330] Mem abort info: [ 845.470624][T25330] ESR = 0x0000000086000004 [ 845.471901][T25330] EC = 0x21: IABT (current EL), IL = 32 bits [ 845.475421][T25330] SET = 0, FnV = 0 [ 845.478480][T25330] EA = 0, S1PTW = 0 00:14:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) [ 845.479701][T25330] FSC = 0x04: level 0 translation fault [ 845.481485][T25330] user pgtable: 4k pages, 48-bit VAs, pgdp=000000010b523000 [ 845.483479][T25330] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000 [ 845.485590][T25330] Internal error: Oops: 0000000086000004 [#1] PREEMPT SMP [ 845.487462][T25330] Modules linked in: [ 845.488532][T25330] CPU: 1 PID: 25330 Comm: kworker/1:25 Tainted: G B W 6.8.0-rc7-syzkaller-g707081b61156 #0 [ 845.491517][T25330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 845.494204][T25330] Workqueue: events sco_sock_timeout [ 845.495588][T25330] pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 845.497681][T25330] pc : 0x0 [ 845.498553][T25330] lr : sco_sock_timeout+0xf4/0x25c [ 845.499953][T25330] sp : ffff800097f47b20 [ 845.501052][T25330] x29: ffff800097f47b20 x28: 1fffe00018c33b8a x27: dfff800000000000 [ 845.503132][T25330] x26: ffff0000c1084408 x25: ffff0000c619dc50 x24: ffff0001b4035700 [ 845.505273][T25330] x23: dfff800000000000 x22: 0000000000000000 x21: ffff0000c619dc08 [ 845.507337][T25330] x20: ffff0000dc114000 x19: ffff0000dc114080 x18: 1fffe00036804396 [ 845.509522][T25330] x17: ffff80008ec9d000 x16: ffff8000809fd6d8 x15: ffff60001b822813 [ 845.511672][T25330] x14: 1fffe0001b822813 x13: 00000000000000fb x12: ffffffffffffffff [ 845.513802][T25330] x11: ffff800097f3ffff x10: 0000000000ff0100 x9 : ffff800093486880 [ 845.516039][T25330] x8 : 0000000000000000 x7 : 1fffe00036804397 x6 : ffff800088eaf8bc [ 845.518191][T25330] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800089fa2f38 [ 845.520351][T25330] x2 : 0000000000000000 x1 : 0000000000000008 x0 : ffff0000dc114000 [ 845.522505][T25330] Call trace: [ 845.523372][T25330] 0x0 [ 845.524102][T25330] process_one_work+0x694/0x1204 [ 845.525421][T25330] worker_thread+0x938/0xef4 [ 845.526664][T25330] kthread+0x288/0x310 [ 845.527744][T25330] ret_from_fork+0x10/0x20 [ 845.528908][T25330] Code: ???????? ???????? ???????? ???????? (????????) [ 845.530732][T25330] ---[ end trace 0000000000000000 ]--- 00:14:05 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) 00:14:05 executing program 2: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) 00:14:05 executing program 4: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', 0x0}) 00:14:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) 00:14:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x2, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) 00:14:05 executing program 3: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', 0x0}) 00:14:05 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) 00:14:05 executing program 2: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:05 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x2, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) 00:14:05 executing program 1: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', 0x0}) 00:14:05 executing program 1: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x2, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) 00:14:05 executing program 3: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) 00:14:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0]}) 00:14:05 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x2, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) 00:14:05 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 00:14:05 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x2, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) 00:14:05 executing program 3: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) 00:14:05 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x2, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000001400)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x52, 0x0, @remote, @broadcast}}}}) 00:14:05 executing program 4: shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffb000/0x2000)=nil) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001480)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="65727370616e300000000000000000003eabc475d9d3668ca00a0938d36f4308b06d5c4c8b69792b09777a4e820c8f6855aec0bb006dd488f9638e50279c2f37961b921031c68da5e831ee730c071db1f2a2cab5b66b9ad2400707f238f3c9c6627c341e18f47f741e43b2800b7ec6c79761427737f24efc959aea9f2c227a8628634d6b353348c7255d842580ca8994bc3d5a8e112a0d76b8fdc45774f3b7bde7b4f928f4408becd60633954bb7ccdc58a586563f649cc8d01800ffe2a6c8e11689", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000450000140000000000529078ac1414bbffffffff"]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000240)=@raw=[@exit, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xc, 0x3, 0x0, 0x5}], &(0x7f0000000280)='syzkaller\x00', 0xfffff000, 0xf0, &(0x7f00000002c0)=""/240, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x9, 0x37d, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0xd, 0x3}, {0x5, 0x1, 0x9, 0x4}, {0x0, 0x3, 0x6, 0x8}], 0x10, 0x3}, 0x90) [ 846.273973][T25330] Kernel panic - not syncing: Oops: Fatal exception [ 846.275819][T25330] SMP: stopping secondary CPUs [ 846.277108][T25330] Kernel Offset: disabled [ 846.278224][T25330] CPU features: 0x0,00000081,c0080094,42017203 [ 846.279922][T25330] Memory Limit: none [ 846.955431][T25330] Rebooting in 86400 seconds..