x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x7, 0xaffb, 0x792e, {{0xf, 0x4, 0x0, 0x24, 0x3c, 0x66, 0x0, 0x3, 0x4, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0xc3, 0x0, 0x3, [0x6]}, @ra={0x94, 0x4}]}}}}}) 00:22:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x1000000}, 0x0) 00:22:15 executing program 1: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x20, &(0x7f0000001a40)={&(0x7f00000009c0)=""/123, 0x7b, 0x0, &(0x7f0000000a40)=""/4096, 0x1000}}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x800, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001b00)={r1, 0x0, 0x25, 0x15, @val=@target_btf_id=r0}, 0x40) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1c, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x6}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @alu={0x4, 0x0, 0x5, 0x5, 0xb, 0x8, 0xffffffffffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x6, 0x9, 0x2, 0xfffffffffffffffc, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001100)={0x3, 0x4, 0x80, 0x4}, 0x10, r0, 0xffffffffffffffff, 0x2, &(0x7f0000001140)=[r2, 0x1], &(0x7f0000001180)=[{0x3, 0x3, 0xa, 0x3}, {0x2, 0x1, 0xd, 0xb}], 0x10, 0xfffffffd}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8906, 0x0) 00:22:15 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x8, 0x7, 0x9, 0x7fff, {{0x1d, 0x4, 0x0, 0x8, 0x74, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast1, @local, {[@end, @noop, @noop, @timestamp={0x44, 0x28, 0xc7, 0x0, 0x0, [0x9, 0x7223, 0x9, 0xc120, 0x7, 0x80000000, 0x0, 0x9, 0x0]}, @noop, @cipso={0x86, 0x27, 0x2, [{0x0, 0x8, "3d1a21ff7719"}, {0x7, 0x11, "c2b3e056e11572c72e289e26f9ea9c"}, {0x0, 0x8, "9c73d799c218"}]}, @noop, @generic={0x83, 0xb, "307486b2305ca1f67c"}]}}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x7, 0xaffb, 0x792e, {{0xf, 0x4, 0x0, 0x24, 0x3c, 0x66, 0x0, 0x3, 0x4, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0xc3, 0x0, 0x3, [0x6]}, @ra={0x94, 0x4}]}}}}}) 00:22:15 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 00:22:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x2000000}, 0x0) 00:22:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x3, 0x80, {{0xc, 0x4, 0x2, 0x0, 0x30, 0x68, 0x0, 0x11, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp={0x44, 0xc, 0x24, 0x0, 0x2, [0x3f, 0x101]}, @end, @timestamp_prespec={0x44, 0xc, 0x50, 0x3, 0x9, [{@empty, 0x1f}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x0, {{0xa, 0x4, 0x1, 0x33, 0x28, 0x64, 0x0, 0x40, 0x29, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0xa, 0x60, 0x1, 0x7, [{@remote, 0x2}]}, @noop, @ra={0x94, 0x4}]}}}}}) 00:22:15 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x8, 0x7, 0x9, 0x7fff, {{0x1d, 0x4, 0x0, 0x8, 0x74, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast1, @local, {[@end, @noop, @noop, @timestamp={0x44, 0x28, 0xc7, 0x0, 0x0, [0x9, 0x7223, 0x9, 0xc120, 0x7, 0x80000000, 0x0, 0x9, 0x0]}, @noop, @cipso={0x86, 0x27, 0x2, [{0x0, 0x8, "3d1a21ff7719"}, {0x7, 0x11, "c2b3e056e11572c72e289e26f9ea9c"}, {0x0, 0x8, "9c73d799c218"}]}, @noop, @generic={0x83, 0xb, "307486b2305ca1f67c"}]}}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:15 executing program 0: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x1, 0x7, 0x8, 0x1ff, {{0xd, 0x4, 0x0, 0x5, 0x34, 0x65, 0x0, 0x81, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @empty, {[@generic={0x88, 0xc, "5ae73b0ee6a40069694b"}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xd7, 0x0, 0x1, [0x10000, 0x8, 0x2]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={0xffffffffffffffff, r0, 0x25, 0x5, @void}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000004c0)={0x3, r1, 0x2}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000004c0)={0x3, r1, 0x2}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000500)) socketpair(0x2c, 0x4, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0xb, &(0x7f0000000640)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x97}, @generic={0x40, 0x4, 0x2, 0x5, 0x9}, @call={0x85, 0x0, 0x0, 0xca}, @call={0x85, 0x0, 0x0, 0xb4}, @generic={0x0, 0xc, 0xb, 0x6, 0xb5}], &(0x7f00000006c0)='syzkaller\x00', 0xbb, 0x0, 0x0, 0x41000, 0x4, '\x00', r0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0xb, 0x0, 0xf889}, 0x10, 0x2299a, r2, 0x2, &(0x7f0000000740)=[r2, r2], &(0x7f0000000780)=[{0x5, 0x5, 0x6, 0xc}, {0x3, 0x4, 0x0, 0x5}], 0x10, 0x10000}, 0x90) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0xb, &(0x7f0000000640)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x97}, @generic={0x40, 0x4, 0x2, 0x5, 0x9}, @call={0x85, 0x0, 0x0, 0xca}, @call={0x85, 0x0, 0x0, 0xb4}, @generic={0x0, 0xc, 0xb, 0x6, 0xb5}], &(0x7f00000006c0)='syzkaller\x00', 0xbb, 0x0, 0x0, 0x41000, 0x4, '\x00', r0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0xb, 0x0, 0xf889}, 0x10, 0x2299a, r2, 0x2, &(0x7f0000000740)=[r2, r2], &(0x7f0000000780)=[{0x5, 0x5, 0x6, 0xc}, {0x3, 0x4, 0x0, 0x5}], 0x10, 0x10000}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x20000000000001d8, 0x4, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x20000000000001d8, 0x4, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="65727370616e30010000a0b80a2cdf00", @ANYRES32=r5, @ANYBLOB="000100010000000400000641498000a400650000060090787f000001e0000002861200000000070cf9f79532f8a61f1642bf44347931000000000000000000000000000003ff0a01010200000fffac1414aa00000005ac14140a000000086401010100000000860b000000000405150fd800831f6dac1e0001ffffffff0a0101020a010100ac1e0101e0000002ffffffff861e00000002020e50ca957cd8a83e06cba09d29010a7167495654629f7300"]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x7, 0xaffb, 0x792e, {{0xf, 0x4, 0x0, 0x24, 0x3c, 0x66, 0x0, 0x3, 0x4, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0xea, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x8, 0xc3, 0x0, 0x3, [0x6]}, @ra={0x94, 0x4}]}}}}}) 00:22:15 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 00:22:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x3000000}, 0x0) 00:22:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x3, 0x80, {{0xc, 0x4, 0x2, 0x0, 0x30, 0x68, 0x0, 0x11, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp={0x44, 0xc, 0x24, 0x0, 0x2, [0x3f, 0x101]}, @end, @timestamp_prespec={0x44, 0xc, 0x50, 0x3, 0x9, [{@empty, 0x1f}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x0, {{0xa, 0x4, 0x1, 0x33, 0x28, 0x64, 0x0, 0x40, 0x29, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0xa, 0x60, 0x1, 0x7, [{@remote, 0x2}]}, @noop, @ra={0x94, 0x4}]}}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x3, 0x80, {{0xc, 0x4, 0x2, 0x0, 0x30, 0x68, 0x0, 0x11, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp={0x44, 0xc, 0x24, 0x0, 0x2, [0x3f, 0x101]}, @end, @timestamp_prespec={0x44, 0xc, 0x50, 0x3, 0x9, [{@empty, 0x1f}]}, @end]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x0, {{0xa, 0x4, 0x1, 0x33, 0x28, 0x64, 0x0, 0x40, 0x29, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0xa, 0x60, 0x1, 0x7, [{@remote, 0x2}]}, @noop, @ra={0x94, 0x4}]}}}}}) (async) 00:22:15 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x8, 0x7, 0x9, 0x7fff, {{0x1d, 0x4, 0x0, 0x8, 0x74, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast1, @local, {[@end, @noop, @noop, @timestamp={0x44, 0x28, 0xc7, 0x0, 0x0, [0x9, 0x7223, 0x9, 0xc120, 0x7, 0x80000000, 0x0, 0x9, 0x0]}, @noop, @cipso={0x86, 0x27, 0x2, [{0x0, 0x8, "3d1a21ff7719"}, {0x7, 0x11, "c2b3e056e11572c72e289e26f9ea9c"}, {0x0, 0x8, "9c73d799c218"}]}, @noop, @generic={0x83, 0xb, "307486b2305ca1f67c"}]}}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xffffffffffffff01, r0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) r3 = gettid() r4 = syz_open_procfs$namespace(r3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400e700d0cd3a6f4b83c358841a8a82dfc992acbeda61e4f9ab470b12a7c55831c056a61a9d8391790f27df20769789c468abb39f23bdfda2986b83edd30e47d017293b6af30aa4f158ddb9aa847264ccb3d3d6051486c8740b8914cfd79c705c41cd8afc15a8c2c0f976c007", @ANYRES16=0x0, @ANYBLOB="00042abd70001754bc4c1400000008001c00", @ANYRES32=r3, @ANYBLOB="0c00060003000000030000000c0006000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000480)={0x3ff, r4}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={@multicast1, 0x0, 0x0, 0x30, 0x0, [{@multicast2}, {@broadcast}, {@remote}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @private=0xa010101, 0x18, 0x16}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000101000000000000000001475d001c006600000000907864010101ffffffff8306000000010201"]}) syz_open_procfs$namespace(r3, &(0x7f0000000540)='ns/time_for_children\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='sit0\x00'/16, @ANYRES32=r7, @ANYBLOB="00100040000000000000ffff4325004c006500008104907800000000e00000028323d27f00000100000000ac14143e00000000ffffff0316010101e0000002e00000020713a40a8101007f0000015fb060197f0000010000"]}) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000340)={0xfffffffffffffffe, r0, 0x1}) 00:22:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x81}, 0xa) 00:22:15 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 00:22:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x4000000}, 0x0) 00:22:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x700, 0x40, 0x3, 0x80, {{0xc, 0x4, 0x2, 0x0, 0x30, 0x68, 0x0, 0x11, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, {[@timestamp={0x44, 0xc, 0x24, 0x0, 0x2, [0x3f, 0x101]}, @end, @timestamp_prespec={0x44, 0xc, 0x50, 0x3, 0x9, [{@empty, 0x1f}]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x0, {{0xa, 0x4, 0x1, 0x33, 0x28, 0x64, 0x0, 0x40, 0x29, 0x0, @local, @empty, {[@timestamp_addr={0x44, 0xa, 0x60, 0x1, 0x7, [{@remote, 0x2}]}, @noop, @ra={0x94, 0x4}]}}}}}) 00:22:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000040)={'syztnl2\x00', 0x0}) 00:22:15 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x418080, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x40, 0x9, 0x401, 0x822, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x2}, 0x48) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xc47a, 0x1, 0x4, 0x3000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x9}, 0x48) r5 = fsmount(0xffffffffffffffff, 0x1, 0x88) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={r5, 0x20, &(0x7f0000001540)={&(0x7f00000004c0)=""/107, 0x6b, 0x0, &(0x7f0000000540)=""/4096, 0x1000}}, 0x10) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={0x0, 0x2, 0x2, 0x8834, 0x0, [], [0x10001, 0x6c5, 0x911, 0xff], [0x7, 0x1, 0x1, 0x3], [0x0, 0x2, 0x8, 0x81]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="8520000004000000185100000300000000000000000000009f00020004000000850000008f00000018150000", @ANYRES32=r0, @ANYBLOB="00000000000000008136ff03020000009500000000000000af100001fcffffff18110000", @ANYRES32=r1, @ANYBLOB="00ffffffffffffffff96fffffcffffff"], &(0x7f0000000140)='GPL\x00', 0x53, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x1, 0xffffffff, 0x5}, 0x10, 0x1bf29, r2, 0x5, &(0x7f0000000280)=[0x1, 0x1, r4, r5, r6, 0x1], &(0x7f00000002c0)=[{0x1, 0x1, 0x1, 0xc}, {0x2, 0x1, 0x0, 0x4}, {0x0, 0x5, 0x3, 0xa}, {0x2, 0x1, 0x1, 0x7}, {0x2, 0x3, 0x5, 0x2}], 0x10, 0xfff}, 0x90) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:15 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x81}, 0xa) 00:22:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x5000000}, 0x0) 00:22:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000040)={'syztnl2\x00', 0x0}) 00:22:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x81}, 0xa) 00:22:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/114, 0x72, 0x0, &(0x7f0000000080)=""/62, 0x3e}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xffffffffffffff01, r0}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r3 = gettid() r4 = syz_open_procfs$namespace(r3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400e700d0cd3a6f4b83c358841a8a82dfc992acbeda61e4f9ab470b12a7c55831c056a61a9d8391790f27df20769789c468abb39f23bdfda2986b83edd30e47d017293b6af30aa4f158ddb9aa847264ccb3d3d6051486c8740b8914cfd79c705c41cd8afc15a8c2c0f976c007", @ANYRES16=0x0, @ANYBLOB="00042abd70001754bc4c1400000008001c00", @ANYRES32=r3, @ANYBLOB="0c00060003000000030000000c0006000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000480)={0x3ff, r4}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={@multicast1, 0x0, 0x0, 0x30, 0x0, [{@multicast2}, {@broadcast}, {@remote}]}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @private=0xa010101, 0x18, 0x16}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000101000000000000000001475d001c006600000000907864010101ffffffff8306000000010201"]}) syz_open_procfs$namespace(r3, &(0x7f0000000540)='ns/time_for_children\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='sit0\x00'/16, @ANYRES32=r7, @ANYBLOB="00100040000000000000ffff4325004c006500008104907800000000e00000028323d27f00000100000000ac14143e00000000ffffff0316010101e0000002e00000020713a40a8101007f0000015fb060197f0000010000"]}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000340)={0xfffffffffffffffe, r0, 0x1}) 00:22:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x6000000}, 0x0) 00:22:15 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x418080, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x40, 0x9, 0x401, 0x822, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x2}, 0x48) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xc47a, 0x1, 0x4, 0x3000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x9}, 0x48) r5 = fsmount(0xffffffffffffffff, 0x1, 0x88) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={r5, 0x20, &(0x7f0000001540)={&(0x7f00000004c0)=""/107, 0x6b, 0x0, &(0x7f0000000540)=""/4096, 0x1000}}, 0x10) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={0x0, 0x2, 0x2, 0x8834, 0x0, [], [0x10001, 0x6c5, 0x911, 0xff], [0x7, 0x1, 0x1, 0x3], [0x0, 0x2, 0x8, 0x81]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="8520000004000000185100000300000000000000000000009f00020004000000850000008f00000018150000", @ANYRES32=r0, @ANYBLOB="00000000000000008136ff03020000009500000000000000af100001fcffffff18110000", @ANYRES32=r1, @ANYBLOB="00ffffffffffffffff96fffffcffffff"], &(0x7f0000000140)='GPL\x00', 0x53, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x1, 0xffffffff, 0x5}, 0x10, 0x1bf29, r2, 0x5, &(0x7f0000000280)=[0x1, 0x1, r4, r5, r6, 0x1], &(0x7f00000002c0)=[{0x1, 0x1, 0x1, 0xc}, {0x2, 0x1, 0x0, 0x4}, {0x0, 0x5, 0x3, 0xa}, {0x2, 0x1, 0x1, 0x7}, {0x2, 0x3, 0x5, 0x2}], 0x10, 0xfff}, 0x90) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000040)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000040)={'syztnl2\x00', 0x0}) (async) 00:22:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/114, 0x72, 0x0, &(0x7f0000000080)=""/62, 0x3e}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:15 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x418080, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x40, 0x9, 0x401, 0x822, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x2}, 0x48) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xc47a, 0x1, 0x4, 0x3000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x9}, 0x48) (async) r5 = fsmount(0xffffffffffffffff, 0x1, 0x88) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={r5, 0x20, &(0x7f0000001540)={&(0x7f00000004c0)=""/107, 0x6b, 0x0, &(0x7f0000000540)=""/4096, 0x1000}}, 0x10) (async) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={0x0, 0x2, 0x2, 0x8834, 0x0, [], [0x10001, 0x6c5, 0x911, 0xff], [0x7, 0x1, 0x1, 0x3], [0x0, 0x2, 0x8, 0x81]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="8520000004000000185100000300000000000000000000009f00020004000000850000008f00000018150000", @ANYRES32=r0, @ANYBLOB="00000000000000008136ff03020000009500000000000000af100001fcffffff18110000", @ANYRES32=r1, @ANYBLOB="00ffffffffffffffff96fffffcffffff"], &(0x7f0000000140)='GPL\x00', 0x53, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x4, 0x1, 0xffffffff, 0x5}, 0x10, 0x1bf29, r2, 0x5, &(0x7f0000000280)=[0x1, 0x1, r4, r5, r6, 0x1], &(0x7f00000002c0)=[{0x1, 0x1, 0x1, 0xc}, {0x2, 0x1, 0x0, 0x4}, {0x0, 0x5, 0x3, 0xa}, {0x2, 0x1, 0x1, 0x7}, {0x2, 0x3, 0x5, 0x2}], 0x10, 0xfff}, 0x90) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x7, 0xbf, {{0x1f, 0x4, 0x2, 0x9, 0x7c, 0x67, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x18, 0xcd, 0x0, 0x6, [0x200, 0x0, 0x5, 0xd3, 0x9]}, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x5, [{@multicast2}, {@empty, 0xfffffffe}]}, @timestamp={0x44, 0x14, 0xf1, 0x0, 0x6, [0x6, 0x3ff, 0x2, 0x401]}, @ssrr={0x89, 0x13, 0xbb, [@rand_addr=0x64010102, @loopback, @empty, @multicast2]}, @timestamp={0x44, 0x14, 0x2a, 0x0, 0x8, [0x7, 0x0, 0x0, 0x8]}]}}}}}) 00:22:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x7000000}, 0x0) 00:22:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=""/114, 0x72, 0x0, &(0x7f0000000080)=""/62, 0x3e}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0xffffffffffffff01, r0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async, rerun: 64) r3 = gettid() (rerun: 64) r4 = syz_open_procfs$namespace(r3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240), 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400e700d0cd3a6f4b83c358841a8a82dfc992acbeda61e4f9ab470b12a7c55831c056a61a9d8391790f27df20769789c468abb39f23bdfda2986b83edd30e47d017293b6af30aa4f158ddb9aa847264ccb3d3d6051486c8740b8914cfd79c705c41cd8afc15a8c2c0f976c007", @ANYRES16=0x0, @ANYBLOB="00042abd70001754bc4c1400000008001c00", @ANYRES32=r3, @ANYBLOB="0c00060003000000030000000c0006000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000480)={0x3ff, r4}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000500)={'sit0\x00', &(0x7f00000004c0)={@multicast1, 0x0, 0x0, 0x30, 0x0, [{@multicast2}, {@broadcast}, {@remote}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @private=0xa010101, 0x18, 0x16}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000101000000000000000001475d001c006600000000907864010101ffffffff8306000000010201"]}) (async) syz_open_procfs$namespace(r3, &(0x7f0000000540)='ns/time_for_children\x00') ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='sit0\x00'/16, @ANYRES32=r7, @ANYBLOB="00100040000000000000ffff4325004c006500008104907800000000e00000028323d27f00000100000000ac14143e00000000ffffff0316010101e0000002e00000020713a40a8101007f0000015fb060197f0000010000"]}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000340)={0xfffffffffffffffe, r0, 0x1}) 00:22:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x9000000}, 0x0) 00:22:15 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0xc) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x2}) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f00000000c0)=0x7) 00:22:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x7, 0xbf, {{0x1f, 0x4, 0x2, 0x9, 0x7c, 0x67, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x18, 0xcd, 0x0, 0x6, [0x200, 0x0, 0x5, 0xd3, 0x9]}, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x5, [{@multicast2}, {@empty, 0xfffffffe}]}, @timestamp={0x44, 0x14, 0xf1, 0x0, 0x6, [0x6, 0x3ff, 0x2, 0x401]}, @ssrr={0x89, 0x13, 0xbb, [@rand_addr=0x64010102, @loopback, @empty, @multicast2]}, @timestamp={0x44, 0x14, 0x2a, 0x0, 0x8, [0x7, 0x0, 0x0, 0x8]}]}}}}}) 00:22:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl1\x00', 0x0}) 00:22:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x40000000}, 0x0) 00:22:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x7, 0xbf, {{0x1f, 0x4, 0x2, 0x9, 0x7c, 0x67, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x18, 0xcd, 0x0, 0x6, [0x200, 0x0, 0x5, 0xd3, 0x9]}, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x5, [{@multicast2}, {@empty, 0xfffffffe}]}, @timestamp={0x44, 0x14, 0xf1, 0x0, 0x6, [0x6, 0x3ff, 0x2, 0x401]}, @ssrr={0x89, 0x13, 0xbb, [@rand_addr=0x64010102, @loopback, @empty, @multicast2]}, @timestamp={0x44, 0x14, 0x2a, 0x0, 0x8, [0x7, 0x0, 0x0, 0x8]}]}}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0x7, 0xbf, {{0x1f, 0x4, 0x2, 0x9, 0x7c, 0x67, 0x0, 0x1, 0x2f, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x18, 0xcd, 0x0, 0x6, [0x200, 0x0, 0x5, 0xd3, 0x9]}, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x5, [{@multicast2}, {@empty, 0xfffffffe}]}, @timestamp={0x44, 0x14, 0xf1, 0x0, 0x6, [0x6, 0x3ff, 0x2, 0x401]}, @ssrr={0x89, 0x13, 0xbb, [@rand_addr=0x64010102, @loopback, @empty, @multicast2]}, @timestamp={0x44, 0x14, 0x2a, 0x0, 0x8, [0x7, 0x0, 0x0, 0x8]}]}}}}}) (async) 00:22:15 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0xc) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x2}) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f00000000c0)=0x7) 00:22:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl1\x00', 0x0}) 00:22:15 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x0, 0xc) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x2}) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f00000000c0)=0x7) (async) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f00000000c0)=0x7) 00:22:15 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x92270000}, 0x0) 00:22:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl1\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl1\x00', 0x0}) (async) 00:22:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0x2528}, @local, 0xa, 0x2}}) 00:22:15 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x1, 0x4, 0x5, 0x20, 0xffff, 0x7fff, 0x401, 0x1}, &(0x7f0000000040)={0x2fd, 0xfedd, 0xbb, 0x1f, 0x6, 0x0, 0x7}, &(0x7f0000000080)={0x1, 0x3, 0x5, 0x9, 0x9, 0x4, 0x1, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f00000001c0)={&(0x7f0000000140)={[0xfffffffffffffffa]}, 0x8}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:16 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:16 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000140)) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x800, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x0, 0x20, 0x0, [{@multicast1}, {@dev}]}}) 00:22:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0xf0ffffff}, 0x0) 00:22:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:16 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x1, 0x4, 0x5, 0x20, 0xffff, 0x7fff, 0x401, 0x1}, &(0x7f0000000040)={0x2fd, 0xfedd, 0xbb, 0x1f, 0x6, 0x0, 0x7}, &(0x7f0000000080)={0x1, 0x3, 0x5, 0x9, 0x9, 0x4, 0x1, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f00000001c0)={&(0x7f0000000140)={[0xfffffffffffffffa]}, 0x8}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) clock_gettime(0x0, &(0x7f00000000c0)) (async) pselect6(0x40, &(0x7f0000000000)={0x1, 0x4, 0x5, 0x20, 0xffff, 0x7fff, 0x401, 0x1}, &(0x7f0000000040)={0x2fd, 0xfedd, 0xbb, 0x1f, 0x6, 0x0, 0x7}, &(0x7f0000000080)={0x1, 0x3, 0x5, 0x9, 0x9, 0x4, 0x1, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f00000001c0)={&(0x7f0000000140)={[0xfffffffffffffffa]}, 0x8}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0x2528}, @local, 0xa, 0x2}}) 00:22:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0xffffff7f}, 0x0) 00:22:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0x2528}, @local, 0xa, 0x2}}) 00:22:16 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x1, 0x4, 0x5, 0x20, 0xffff, 0x7fff, 0x401, 0x1}, &(0x7f0000000040)={0x2fd, 0xfedd, 0xbb, 0x1f, 0x6, 0x0, 0x7}, &(0x7f0000000080)={0x1, 0x3, 0x5, 0x9, 0x9, 0x4, 0x1, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f00000001c0)={&(0x7f0000000140)={[0xfffffffffffffffa]}, 0x8}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:16 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:16 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000140)) (async, rerun: 64) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x800, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x0, 0x20, 0x0, [{@multicast1}, {@dev}]}}) 00:22:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0xfffffff0}, 0x0) 00:22:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000014a14c33066ab411513c8092fd131aba0e6cbf129f10ec45d0696018da24a659b140dc98f5d69a3b2dcff04549d411bec967b3dd55b473a8491b56e6d4f23871873738aa328f8366b6f907228da388d0a1f08b00db7287e7d5355d69cd16c0ee33cf75730a", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf25050000001400080076657468305f6d616376746170000000"], 0x28}, 0x1, 0x0, 0x0, 0x80400c0}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r2 = gettid() r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0x1, &(0x7f0000002100)=@raw=[@ldst={0x0, 0x0, 0x2}], &(0x7f0000002140)='GPL\x00', 0x5, 0xf1, &(0x7f0000002180)=""/241}, 0x90) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000002c0)={0x0, r6, 0x0, 0x9, 0x5, 0xfffffe00, 0x800000, 0x1, 0x8001, 0x5, 0x7, 0x9}) 00:22:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x40030000000000}, 0x0) 00:22:16 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000040)={'syztnl2\x00', 0x0}) r1 = socket$inet(0x2, 0x80000, 0x5) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f00000000c0)=""/77, &(0x7f0000000000)=0x3a) 00:22:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000014a14c33066ab411513c8092fd131aba0e6cbf129f10ec45d0696018da24a659b140dc98f5d69a3b2dcff04549d411bec967b3dd55b473a8491b56e6d4f23871873738aa328f8366b6f907228da388d0a1f08b00db7287e7d5355d69cd16c0ee33cf75730a", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf25050000001400080076657468305f6d616376746170000000"], 0x28}, 0x1, 0x0, 0x0, 0x80400c0}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r2 = gettid() r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0x1, &(0x7f0000002100)=@raw=[@ldst={0x0, 0x0, 0x2}], &(0x7f0000002140)='GPL\x00', 0x5, 0xf1, &(0x7f0000002180)=""/241}, 0x90) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000002c0)={0x0, r6, 0x0, 0x9, 0x5, 0xfffffe00, 0x800000, 0x1, 0x8001, 0x5, 0x7, 0x9}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000014a14c33066ab411513c8092fd131aba0e6cbf129f10ec45d0696018da24a659b140dc98f5d69a3b2dcff04549d411bec967b3dd55b473a8491b56e6d4f23871873738aa328f8366b6f907228da388d0a1f08b00db7287e7d5355d69cd16c0ee33cf75730a", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf25050000001400080076657468305f6d616376746170000000"], 0x28}, 0x1, 0x0, 0x0, 0x80400c0}, 0x4000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) gettid() (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0x1, &(0x7f0000002100)=@raw=[@ldst={0x0, 0x0, 0x2}], &(0x7f0000002140)='GPL\x00', 0x5, 0xf1, &(0x7f0000002180)=""/241}, 0x90) (async) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000002c0)={0x0, r6, 0x0, 0x9, 0x5, 0xfffffe00, 0x800000, 0x1, 0x8001, 0x5, 0x7, 0x9}) (async) 00:22:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x100000000000000}, 0x0) 00:22:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:16 executing program 1: rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000140)) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x800, 0x2) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x0, 0x20, 0x0, [{@multicast1}, {@dev}]}}) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000140)) (async) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x800, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, 0x0, 0x20, 0x0, [{@multicast1}, {@dev}]}}) (async) 00:22:16 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x200000000000000}, 0x0) 00:22:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000014a14c33066ab411513c8092fd131aba0e6cbf129f10ec45d0696018da24a659b140dc98f5d69a3b2dcff04549d411bec967b3dd55b473a8491b56e6d4f23871873738aa328f8366b6f907228da388d0a1f08b00db7287e7d5355d69cd16c0ee33cf75730a", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf25050000001400080076657468305f6d616376746170000000"], 0x28}, 0x1, 0x0, 0x0, 0x80400c0}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r2 = gettid() r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0x1, &(0x7f0000002100)=@raw=[@ldst={0x0, 0x0, 0x2}], &(0x7f0000002140)='GPL\x00', 0x5, 0xf1, &(0x7f0000002180)=""/241}, 0x90) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000002c0)={0x0, r6, 0x0, 0x9, 0x5, 0xfffffe00, 0x800000, 0x1, 0x8001, 0x5, 0x7, 0x9}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000014a14c33066ab411513c8092fd131aba0e6cbf129f10ec45d0696018da24a659b140dc98f5d69a3b2dcff04549d411bec967b3dd55b473a8491b56e6d4f23871873738aa328f8366b6f907228da388d0a1f08b00db7287e7d5355d69cd16c0ee33cf75730a", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf25050000001400080076657468305f6d616376746170000000"], 0x28}, 0x1, 0x0, 0x0, 0x80400c0}, 0x4000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) gettid() (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002340)={0x6, 0x1, &(0x7f0000002100)=@raw=[@ldst={0x0, 0x0, 0x2}], &(0x7f0000002140)='GPL\x00', 0x5, 0xf1, &(0x7f0000002180)=""/241}, 0x90) (async) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/uts\x00') (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000140)=[0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f00000002c0)={0x0, r6, 0x0, 0x9, 0x5, 0xfffffe00, 0x800000, 0x1, 0x8001, 0x5, 0x7, 0x9}) (async) 00:22:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'syztnl2\x00', 0x0}) (async) 00:22:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x5, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x50}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x11) 00:22:16 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000040)={'syztnl2\x00', 0x0}) (async) r1 = socket$inet(0x2, 0x80000, 0x5) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f00000000c0)=""/77, &(0x7f0000000000)=0x3a) 00:22:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0400007000ffdbdf25de8ae61c74"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40088d1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x38}}, 0x4840) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x240104}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4020000}, 0x4004084) 00:22:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x300000000000000}, 0x0) 00:22:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0xa0, 0x0, [{@local}, {@remote}, {}, {@loopback}, {}, {}, {@private}, {@local}, {@loopback}, {@multicast2}]}}) 00:22:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8fc6, 0x400402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x4172, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r1, 0x0, 0x0], 0x3}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0400007000ffdbdf25de8ae61c74"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40088d1) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x38}}, 0x4840) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x240104}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4020000}, 0x4004084) 00:22:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x400000000000000}, 0x0) 00:22:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x5, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (rerun: 64) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x50}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x11) 00:22:16 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000040)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000040)={'syztnl2\x00', 0x0}) r1 = socket$inet(0x2, 0x80000, 0x5) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f00000000c0)=""/77, &(0x7f0000000000)=0x3a) 00:22:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0xa0, 0x0, [{@local}, {@remote}, {}, {@loopback}, {}, {}, {@private}, {@local}, {@loopback}, {@multicast2}]}}) 00:22:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8fc6, 0x400402) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x4172, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r1, 0x0, 0x0], 0x3}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0400007000ffdbdf25de8ae61c74"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40088d1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x38}}, 0x4840) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x240104}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4020000}, 0x4004084) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0400007000ffdbdf25de8ae61c74"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40088d1) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x38}}, 0x4840) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x240104}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4020000}, 0x4004084) (async) 00:22:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x500000000000000}, 0x0) 00:22:16 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x8fc6, 0x400402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x4172, 0x5, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r1, 0x0, 0x0], 0x3}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x8fc6, 0x400402) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x4172, 0x5, 0x4}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r1, 0x0, 0x0], 0x3}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0xa0, 0x0, [{@local}, {@remote}, {}, {@loopback}, {}, {}, {@private}, {@local}, {@loopback}, {@multicast2}]}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x0, 0xa0, 0x0, [{@local}, {@remote}, {}, {@loopback}, {}, {}, {@private}, {@local}, {@loopback}, {@multicast2}]}}) (async) 00:22:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000000)=0x5, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x50}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x11) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x50}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x11) 00:22:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x600000000000000}, 0x0) 00:22:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000380)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x7, 0x6, {{0x9, 0x4, 0x1, 0x2b, 0x24, 0x66, 0x0, 0x2, 0x4, 0x0, @loopback, @private=0xa010101, {[@ssrr={0x89, 0x7, 0x8b, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="74756e01000000000000800200000000", @ANYRES32=r3, @ANYBLOB="0700000700000040000000084d89003400640000ac049078ac1e0101e0000002861b0029230006110650467dbd2d810085a41ac46cb0c70704d51e0704d55c00709f9c4351563a8554aedefb94651cb8555b6dff03c2855b3cd42296de147c72eb78ce18593e8937d62b3489779bd2686e99e5d91e5db5dbfcd4c84bab39d96e7caa45381a797b01cb396742c683"]}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0a01010201000000cefeffff00000000ac1414bb000000000000000000000000ac1414bb000000000000000000000000ac1e00000000000000000000000000007f000001000000000000000000001400000000000000000000000000ac1414bb000000000000000000000000ac1414bb00"/124]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$bt_cmtp(0x1f, 0x3, 0x5) 00:22:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0x1, 0x9, @loopback, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x80, 0x8, 0x1, 0x6}}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4, 0x0}, 0x8) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0x5, r0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x7fff, r0, 0x2}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x7, 0x3f, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xa, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @ldst={0x2, 0x1, 0x3, 0x3, 0xb, 0x40}], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x8a, &(0x7f00000000c0)=""/138, 0x41100, 0x2, '\x00', r2, 0xf, r3, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x7, 0x3}, 0x10, r4, r5, 0x5, &(0x7f0000000480)=[0xffffffffffffffff, r6, r7, r0, 0x1, r8, 0x1, r9], &(0x7f00000004c0)=[{0x5, 0x5, 0x2, 0x4}, {0x2, 0x1, 0x7, 0x6}, {0x3, 0x3, 0x6, 0xb}, {0x3, 0x5, 0x5, 0x1}, {0x5, 0x4, 0xe, 0x4}]}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r8, &(0x7f0000000840)="ebab18ad309c02a9f324d95705165db7ea60718d35b829345647c5c8e07f02573d27ba82419068c2f5f0b0976e0e4111b1787c05a1fc5b9569fb7d21a9e976d57cf2baa6734f54655ccf4a6ee2f7587f5e2d4830ad9d0432ce79b210328c8432243c2f0cc124fdbde27b73f7642cbe293e0c04187df30d9a42094debae1d1431a5aa9c1d58853c7d9754f21180cb0170773dd2f3eeb81bbfbeb37ec3acaf45afefac57925b62b2915c98293152ae2ce0a8", &(0x7f0000000900)=@tcp6, 0x2}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r10, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf7}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r11}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20008091) 00:22:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:16 executing program 2: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044410}, 0x20000001) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) 00:22:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x700000000000000}, 0x0) 00:22:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000380)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x7, 0x6, {{0x9, 0x4, 0x1, 0x2b, 0x24, 0x66, 0x0, 0x2, 0x4, 0x0, @loopback, @private=0xa010101, {[@ssrr={0x89, 0x7, 0x8b, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="74756e01000000000000800200000000", @ANYRES32=r3, @ANYBLOB="0700000700000040000000084d89003400640000ac049078ac1e0101e0000002861b0029230006110650467dbd2d810085a41ac46cb0c70704d51e0704d55c00709f9c4351563a8554aedefb94651cb8555b6dff03c2855b3cd42296de147c72eb78ce18593e8937d62b3489779bd2686e99e5d91e5db5dbfcd4c84bab39d96e7caa45381a797b01cb396742c683"]}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0a01010201000000cefeffff00000000ac1414bb000000000000000000000000ac1414bb000000000000000000000000ac1e00000000000000000000000000007f000001000000000000000000001400000000000000000000000000ac1414bb000000000000000000000000ac1414bb00"/124]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000380)=0x1, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x7, 0x6, {{0x9, 0x4, 0x1, 0x2b, 0x24, 0x66, 0x0, 0x2, 0x4, 0x0, @loopback, @private=0xa010101, {[@ssrr={0x89, 0x7, 0x8b, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="74756e01000000000000800200000000", @ANYRES32=r3, @ANYBLOB="0700000700000040000000084d89003400640000ac049078ac1e0101e0000002861b0029230006110650467dbd2d810085a41ac46cb0c70704d51e0704d55c00709f9c4351563a8554aedefb94651cb8555b6dff03c2855b3cd42296de147c72eb78ce18593e8937d62b3489779bd2686e99e5d91e5db5dbfcd4c84bab39d96e7caa45381a797b01cb396742c683"]}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0a01010201000000cefeffff00000000ac1414bb000000000000000000000000ac1414bb000000000000000000000000ac1e00000000000000000000000000007f000001000000000000000000001400000000000000000000000000ac1414bb000000000000000000000000ac1414bb00"/124]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800}) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) 00:22:16 executing program 2: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044410}, 0x20000001) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044410}, 0x20000001) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x900000000000000}, 0x0) 00:22:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0x1, 0x9, @loopback, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x80, 0x8, 0x1, 0x6}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0x1, 0x9, @loopback, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x80, 0x8, 0x1, 0x6}}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4, 0x0}, 0x8) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0x5, r0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x7fff, r0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x7, 0x3f, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x7, 0x3f, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xa, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @ldst={0x2, 0x1, 0x3, 0x3, 0xb, 0x40}], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x8a, &(0x7f00000000c0)=""/138, 0x41100, 0x2, '\x00', r2, 0xf, r3, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x7, 0x3}, 0x10, r4, r5, 0x5, &(0x7f0000000480)=[0xffffffffffffffff, r6, r7, r0, 0x1, r8, 0x1, r9], &(0x7f00000004c0)=[{0x5, 0x5, 0x2, 0x4}, {0x2, 0x1, 0x7, 0x6}, {0x3, 0x3, 0x6, 0xb}, {0x3, 0x5, 0x5, 0x1}, {0x5, 0x4, 0xe, 0x4}]}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r8, &(0x7f0000000840)="ebab18ad309c02a9f324d95705165db7ea60718d35b829345647c5c8e07f02573d27ba82419068c2f5f0b0976e0e4111b1787c05a1fc5b9569fb7d21a9e976d57cf2baa6734f54655ccf4a6ee2f7587f5e2d4830ad9d0432ce79b210328c8432243c2f0cc124fdbde27b73f7642cbe293e0c04187df30d9a42094debae1d1431a5aa9c1d58853c7d9754f21180cb0170773dd2f3eeb81bbfbeb37ec3acaf45afefac57925b62b2915c98293152ae2ce0a8", &(0x7f0000000900)=@tcp6, 0x2}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r8, &(0x7f0000000840)="ebab18ad309c02a9f324d95705165db7ea60718d35b829345647c5c8e07f02573d27ba82419068c2f5f0b0976e0e4111b1787c05a1fc5b9569fb7d21a9e976d57cf2baa6734f54655ccf4a6ee2f7587f5e2d4830ad9d0432ce79b210328c8432243c2f0cc124fdbde27b73f7642cbe293e0c04187df30d9a42094debae1d1431a5aa9c1d58853c7d9754f21180cb0170773dd2f3eeb81bbfbeb37ec3acaf45afefac57925b62b2915c98293152ae2ce0a8", &(0x7f0000000900)=@tcp6, 0x2}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r10, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf7}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r11}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20008091) 00:22:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 00:22:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000380)=0x1, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x7, 0x6, {{0x9, 0x4, 0x1, 0x2b, 0x24, 0x66, 0x0, 0x2, 0x4, 0x0, @loopback, @private=0xa010101, {[@ssrr={0x89, 0x7, 0x8b, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="74756e01000000000000800200000000", @ANYRES32=r3, @ANYBLOB="0700000700000040000000084d89003400640000ac049078ac1e0101e0000002861b0029230006110650467dbd2d810085a41ac46cb0c70704d51e0704d55c00709f9c4351563a8554aedefb94651cb8555b6dff03c2855b3cd42296de147c72eb78ce18593e8937d62b3489779bd2686e99e5d91e5db5dbfcd4c84bab39d96e7caa45381a797b01cb396742c683"]}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0a01010201000000cefeffff00000000ac1414bb000000000000000000000000ac1414bb000000000000000000000000ac1e00000000000000000000000000007f000001000000000000000000001400000000000000000000000000ac1414bb000000000000000000000000ac1414bb00"/124]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$bt_cmtp(0x1f, 0x3, 0x5) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000380)=0x1, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x20, 0x7800, 0x7, 0x6, {{0x9, 0x4, 0x1, 0x2b, 0x24, 0x66, 0x0, 0x2, 0x4, 0x0, @loopback, @private=0xa010101, {[@ssrr={0x89, 0x7, 0x8b, [@rand_addr=0x64010101]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="74756e01000000000000800200000000", @ANYRES32=r3, @ANYBLOB="0700000700000040000000084d89003400640000ac049078ac1e0101e0000002861b0029230006110650467dbd2d810085a41ac46cb0c70704d51e0704d55c00709f9c4351563a8554aedefb94651cb8555b6dff03c2855b3cd42296de147c72eb78ce18593e8937d62b3489779bd2686e99e5d91e5db5dbfcd4c84bab39d96e7caa45381a797b01cb396742c683"]}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0a01010201000000cefeffff00000000ac1414bb000000000000000000000000ac1414bb000000000000000000000000ac1e00000000000000000000000000007f000001000000000000000000001400000000000000000000000000ac1414bb000000000000000000000000ac1414bb00"/124]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800}) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) socket$bt_cmtp(0x1f, 0x3, 0x5) (async) 00:22:17 executing program 2: sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044410}, 0x20000001) (async, rerun: 64) r0 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 00:22:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x4000000000000000}, 0x0) 00:22:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) (async) 00:22:17 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0x1, 0x9, @loopback, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x80, 0x8, 0x1, 0x6}}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x4, 0x0}, 0x8) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0x5, r0, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0], 0x2, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x7fff, r0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x7, 0x3f, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x7, 0x3f, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xa, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @ldst={0x2, 0x1, 0x3, 0x3, 0xb, 0x40}], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x8a, &(0x7f00000000c0)=""/138, 0x41100, 0x2, '\x00', r2, 0xf, r3, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x7, 0x3}, 0x10, r4, r5, 0x5, &(0x7f0000000480)=[0xffffffffffffffff, r6, r7, r0, 0x1, r8, 0x1, r9], &(0x7f00000004c0)=[{0x5, 0x5, 0x2, 0x4}, {0x2, 0x1, 0x7, 0x6}, {0x3, 0x3, 0x6, 0xb}, {0x3, 0x5, 0x5, 0x1}, {0x5, 0x4, 0xe, 0x4}]}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xa, &(0x7f0000000000)=@raw=[@map_fd={0x18, 0xb, 0x1, 0x0, r1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @ldst={0x2, 0x1, 0x3, 0x3, 0xb, 0x40}], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x8a, &(0x7f00000000c0)=""/138, 0x41100, 0x2, '\x00', r2, 0xf, r3, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x7, 0x3}, 0x10, r4, r5, 0x5, &(0x7f0000000480)=[0xffffffffffffffff, r6, r7, r0, 0x1, r8, 0x1, r9], &(0x7f00000004c0)=[{0x5, 0x5, 0x2, 0x4}, {0x2, 0x1, 0x7, 0x6}, {0x3, 0x3, 0x6, 0xb}, {0x3, 0x5, 0x5, 0x1}, {0x5, 0x4, 0xe, 0x4}]}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r8, &(0x7f0000000840)="ebab18ad309c02a9f324d95705165db7ea60718d35b829345647c5c8e07f02573d27ba82419068c2f5f0b0976e0e4111b1787c05a1fc5b9569fb7d21a9e976d57cf2baa6734f54655ccf4a6ee2f7587f5e2d4830ad9d0432ce79b210328c8432243c2f0cc124fdbde27b73f7642cbe293e0c04187df30d9a42094debae1d1431a5aa9c1d58853c7d9754f21180cb0170773dd2f3eeb81bbfbeb37ec3acaf45afefac57925b62b2915c98293152ae2ce0a8", &(0x7f0000000900)=@tcp6, 0x2}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000001dc0)={0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r10, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf7}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r11}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010101}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20008091) 00:22:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8208000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0xe12}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x70, r3, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x28, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x70}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r5, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x2, [@fwd={0x2}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x1}, @fwd={0x3}, @const={0xc, 0x0, 0x0, 0xa, 0x1}, @enum={0x3, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x7}, {0x9, 0x9}, {0xc, 0x1cc46487}, {0xd, 0x1f}, {0x10, 0x401}]}, @enum={0x10, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x7}, {0x5, 0x8}, {0x4, 0x80}, {0x5, 0x5}]}]}}, &(0x7f00000007c0)=""/81, 0xba, 0x51, 0x0, 0x4}, 0x20) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x50) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x50, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast2}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x4080) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x8000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x9227000000000000}, 0x0) 00:22:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 00:22:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000040)=0xffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'erspan0\x00', 0x0}) 00:22:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'gretap0\x00', 0x0}) 00:22:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000000c0)={@none, 0x8}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="65727370616e300000000000000000006341bc668f2b84eb0cee2c16c7cc1624c12694378ac0bd5b46300d5a5bb8675968f330023613a0127837c34ead041189bb76323b4ad273447e10870698f786d60900aa31c765327d70020e71f2de99411a5f8e00a2c5af808991a523ceab0b1efda20d80a9a67cad725c63109035f6", @ANYRES32=0x0, @ANYBLOB="00400020000028c000008000410d004400650000052990780a0101008323abac14140dac1414aae00000010a01010164853196465e981dec20fad55deb4d5cd501010100"/80]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0xf0ffffff00000000}, 0x0) 00:22:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 00:22:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'gretap0\x00', 0x0}) 00:22:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000040)=0xffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'erspan0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x1) (async) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000040)=0xffff) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'erspan0\x00', 0x0}) (async) 00:22:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 00:22:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000000c0)={@none, 0x8}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="65727370616e300000000000000000006341bc668f2b84eb0cee2c16c7cc1624c12694378ac0bd5b46300d5a5bb8675968f330023613a0127837c34ead041189bb76323b4ad273447e10870698f786d60900aa31c765327d70020e71f2de99411a5f8e00a2c5af808991a523ceab0b1efda20d80a9a67cad725c63109035f6", @ANYRES32=0x0, @ANYBLOB="00400020000028c000008000410d004400650000052990780a0101008323abac14140dac1414aae00000010a01010164853196465e981dec20fad55deb4d5cd501010100"/80]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8208000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0xe12}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x70, r3, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x28, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x70}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r5, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x2, [@fwd={0x2}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x1}, @fwd={0x3}, @const={0xc, 0x0, 0x0, 0xa, 0x1}, @enum={0x3, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x7}, {0x9, 0x9}, {0xc, 0x1cc46487}, {0xd, 0x1f}, {0x10, 0x401}]}, @enum={0x10, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x7}, {0x5, 0x8}, {0x4, 0x80}, {0x5, 0x5}]}]}}, &(0x7f00000007c0)=""/81, 0xba, 0x51, 0x0, 0x4}, 0x20) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x50) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x50, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast2}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x4080) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x8000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0xffff80002bb5ffff}, 0x0) 00:22:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'gretap0\x00', 0x0}) 00:22:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f00000000c0)={@none, 0x8}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="65727370616e300000000000000000006341bc668f2b84eb0cee2c16c7cc1624c12694378ac0bd5b46300d5a5bb8675968f330023613a0127837c34ead041189bb76323b4ad273447e10870698f786d60900aa31c765327d70020e71f2de99411a5f8e00a2c5af808991a523ceab0b1efda20d80a9a67cad725c63109035f6", @ANYRES32=0x0, @ANYBLOB="00400020000028c000008000410d004400650000052990780a0101008323abac14140dac1414aae00000010a01010164853196465e981dec20fad55deb4d5cd501010100"/80]}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=0x64010101}}) 00:22:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x1) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000040)=0xffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'erspan0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x1) (async) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000040)=0xffff) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'erspan0\x00', 0x0}) (async) 00:22:17 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r0 = socket$inet(0x2, 0x4, 0x9) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:22:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0xffffb52b0080ffff}, 0x0) 00:22:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0x1e, 0x60, &(0x7f0000000040)={0x23, 0xae, 0x80, 0x20}, 0x10) 00:22:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=0x64010101}}) 00:22:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000200)={'tunl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x20, 0x700, 0x1, 0x1, {{0x11, 0x4, 0x1, 0x18, 0x44, 0x7, 0x0, 0x81, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp={0x44, 0x1c, 0xec, 0x0, 0x8, [0xffff, 0x1, 0x5, 0xfff, 0x7, 0x800]}, @timestamp_prespec={0x44, 0x14, 0xe9, 0x3, 0x9, [{@remote, 0x800}, {@private=0xa010100, 0x7}]}]}}}}}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x32}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40051}, 0x200000c1) 00:22:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0xffffff7f00000000}, 0x0) 00:22:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8208000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2a, 0xe12}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x70, r3, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x28, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x70}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r5, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x2, [@fwd={0x2}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x1}, @fwd={0x3}, @const={0xc, 0x0, 0x0, 0xa, 0x1}, @enum={0x3, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x7}, {0x9, 0x9}, {0xc, 0x1cc46487}, {0xd, 0x1f}, {0x10, 0x401}]}, @enum={0x10, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x7}, {0x5, 0x8}, {0x4, 0x80}, {0x5, 0x5}]}]}}, &(0x7f00000007c0)=""/81, 0xba, 0x51, 0x0, 0x4}, 0x20) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x50) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x50, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast2}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4084}, 0x4080) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r8, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x8000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@rand_addr=0x64010101}}) 00:22:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0x1e, 0x60, &(0x7f0000000040)={0x23, 0xae, 0x80, 0x20}, 0x10) 00:22:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000200)={'tunl0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x20, 0x700, 0x1, 0x1, {{0x11, 0x4, 0x1, 0x18, 0x44, 0x7, 0x0, 0x81, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp={0x44, 0x1c, 0xec, 0x0, 0x8, [0xffff, 0x1, 0x5, 0xfff, 0x7, 0x800]}, @timestamp_prespec={0x44, 0x14, 0xe9, 0x3, 0x9, [{@remote, 0x800}, {@private=0xa010100, 0x7}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x20, 0x700, 0x1, 0x1, {{0x11, 0x4, 0x1, 0x18, 0x44, 0x7, 0x0, 0x81, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp={0x44, 0x1c, 0xec, 0x0, 0x8, [0xffff, 0x1, 0x5, 0xfff, 0x7, 0x800]}, @timestamp_prespec={0x44, 0x14, 0xe9, 0x3, 0x9, [{@remote, 0x800}, {@private=0xa010100, 0x7}]}]}}}}}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x32}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40051}, 0x200000c1) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x32}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40051}, 0x200000c1) 00:22:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0xffffffff00000000}, 0x0) 00:22:17 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000000)=""/30, 0x1e, 0x60, &(0x7f0000000040)={0x23, 0xae, 0x80, 0x20}, 0x10) 00:22:17 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r0 = socket$inet(0x2, 0x4, 0x9) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:22:17 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'sit0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x30}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000001c0)=""/4096, &(0x7f0000000000)=0x1000) 00:22:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000200)={'tunl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x20, 0x700, 0x1, 0x1, {{0x11, 0x4, 0x1, 0x18, 0x44, 0x7, 0x0, 0x81, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp={0x44, 0x1c, 0xec, 0x0, 0x8, [0xffff, 0x1, 0x5, 0xfff, 0x7, 0x800]}, @timestamp_prespec={0x44, 0x14, 0xe9, 0x3, 0x9, [{@remote, 0x800}, {@private=0xa010100, 0x7}]}]}}}}}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x32}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40051}, 0x200000c1) 00:22:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000000)={@any, 0x7fff, 0x2a, 0x0, 0x27b, 0x8d4c, "77322c5c48d9b51eb56dbde9c7d7cd14f77256947491841a3d7a2743ff75ce17f8772ef493a12f850f2be23f0f03738eaed0390be03dd8a3da242e24e4e9cfdfb3394c16c9672011496541da960db0b85868816d1ee9c604d1b58f400951b07b82754d0a1c2291a3cd6ad988f1ab355ac1070ea4582959db0bc54ef9fb9354e7"}) 00:22:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x3, 0x0, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@local, 0x1, 0x0, 0x10, 0x0, [{@broadcast}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:17 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'sit0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x30}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000001c0)=""/4096, &(0x7f0000000000)=0x1000) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000001c0)=""/4096, &(0x7f0000000000)=0x1000) 00:22:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x2}, 0x0) 00:22:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0001070000000000fffffffa489e0020ac6500003f2f9078ffffffff00000000890b797f000081ac14142500"]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', r1, 0x21, 0x80, 0x5, 0x4, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x65, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@lsrr={0x83, 0xb, 0xd9, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x6, 0x2}, @noop]}}}}}) 00:22:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async, rerun: 64) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000000)={@any, 0x7fff, 0x2a, 0x0, 0x27b, 0x8d4c, "77322c5c48d9b51eb56dbde9c7d7cd14f77256947491841a3d7a2743ff75ce17f8772ef493a12f850f2be23f0f03738eaed0390be03dd8a3da242e24e4e9cfdfb3394c16c9672011496541da960db0b85868816d1ee9c604d1b58f400951b07b82754d0a1c2291a3cd6ad988f1ab355ac1070ea4582959db0bc54ef9fb9354e7"}) 00:22:17 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'sit0\x00', 0x0}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x30}}, 0x0) (async) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00000001c0)=""/4096, &(0x7f0000000000)=0x1000) 00:22:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x3, 0x0, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@local, 0x1, 0x0, 0x10, 0x0, [{@broadcast}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair(0x3, 0x0, 0x3, &(0x7f0000000000)) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@local, 0x1, 0x0, 0x10, 0x0, [{@broadcast}]}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) 00:22:17 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0001070000000000fffffffa489e0020ac6500003f2f9078ffffffff00000000890b797f000081ac14142500"]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', r1, 0x21, 0x80, 0x5, 0x4, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x65, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@lsrr={0x83, 0xb, 0xd9, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x6, 0x2}, @noop]}}}}}) 00:22:17 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async, rerun: 64) r0 = socket$inet(0x2, 0x4, 0x9) (rerun: 64) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:22:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x3}, 0x0) 00:22:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0001070000000000fffffffa489e0020ac6500003f2f9078ffffffff00000000890b797f000081ac14142500"]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', r1, 0x21, 0x80, 0x5, 0x4, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x65, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@lsrr={0x83, 0xb, 0xd9, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x6, 0x2}, @noop]}}}}}) 00:22:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gretap0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="67726574da35742ecd89130300001000", @ANYRES32=0x0, @ANYBLOB="8000800000000000000000084ac90028006af4380671640000060490780a0101027f0000010e1247254c32e4d5f2acf1d1eae8d3580ef9e7ff7c3177b8ca5e3a1d4000000000000000b07f7ca2bd81dae8be249cc477607345416e082e4d6e65c93080e25866b20d78cddbcb40e3732e8c140dcf7bdbc0f856e1e87913a53aa47e135811fd0b1836f5934070e7d019c3583dceb01490c41ab3e38d9f72aafa5e5f75c7e5335979c0a0e975300e75c74181ae76425267fddb9bffa90040bff20d8b5e35b1c39202f67cc78e843ef1666b976c09c3874b9c2a9d19d5003d0fb9453cac85748bd7d475ffc82db5fc299c20fa977c17ad10914feebf3d6d00000000000000000000e7e09429485e4a2bc06dfb60e5a2a7f83c0ebfc6df7aa26967d06977f0b3f5fd73eeef67534135935a4ee5b9f687c59636c6fa0a26889016a17439e93e03f28b9718acab0b3d47e4c557f405d3fadfc3be7a7c135cf7"]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0xd1, 0x7, 0x4, 0x1, {{0x1f, 0x4, 0x3, 0x5, 0x7c, 0x64, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x88, 0x8, "ebaae09a8a6b"}, @lsrr={0x83, 0x1f, 0xbd, [@empty, @empty, @loopback, @private=0xa010100, @local, @multicast2, @empty]}, @lsrr={0x83, 0xb, 0xb6, [@multicast2, @remote]}, @noop, @ssrr={0x89, 0x3, 0x8}, @end, @ssrr={0x89, 0x7, 0x2b, [@dev={0xac, 0x14, 0x14, 0x20}]}, @rr={0x7, 0x1b, 0x32, [@multicast1, @empty, @multicast2, @remote, @loopback, @rand_addr=0x64010102]}, @timestamp={0x44, 0xc, 0x12, 0x0, 0x1, [0x6, 0x1]}]}}}}}) fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) 00:22:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) socketpair(0x3, 0x0, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@local, 0x1, 0x0, 0x10, 0x0, [{@broadcast}]}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000000)={@any, 0x7fff, 0x2a, 0x0, 0x27b, 0x8d4c, "77322c5c48d9b51eb56dbde9c7d7cd14f77256947491841a3d7a2743ff75ce17f8772ef493a12f850f2be23f0f03738eaed0390be03dd8a3da242e24e4e9cfdfb3394c16c9672011496541da960db0b85868816d1ee9c604d1b58f400951b07b82754d0a1c2291a3cd6ad988f1ab355ac1070ea4582959db0bc54ef9fb9354e7"}) 00:22:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x4}, 0x0) 00:22:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = fsopen(&(0x7f0000000080)='v7\x00', 0x1) r2 = fsmount(r1, 0x1, 0xfc) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gretap0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="67726574da35742ecd89130300001000", @ANYRES32=0x0, @ANYBLOB="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"]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0xd1, 0x7, 0x4, 0x1, {{0x1f, 0x4, 0x3, 0x5, 0x7c, 0x64, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x88, 0x8, "ebaae09a8a6b"}, @lsrr={0x83, 0x1f, 0xbd, [@empty, @empty, @loopback, @private=0xa010100, @local, @multicast2, @empty]}, @lsrr={0x83, 0xb, 0xb6, [@multicast2, @remote]}, @noop, @ssrr={0x89, 0x3, 0x8}, @end, @ssrr={0x89, 0x7, 0x2b, [@dev={0xac, 0x14, 0x14, 0x20}]}, @rr={0x7, 0x1b, 0x32, [@multicast1, @empty, @multicast2, @remote, @loopback, @rand_addr=0x64010102]}, @timestamp={0x44, 0xc, 0x12, 0x0, 0x1, [0x6, 0x1]}]}}}}}) (async) fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) 00:22:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x2}) r3 = fsmount(r2, 0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00080007000000080000003245ad009400670000092f9078ac14141300000000860951055723343809890bdbffffffffac1e0101830658b82a870717c1640101000a010100ac141423ac1414bbac141427940401000144201f20000000dd00000002000000010000000000000008000000020000000189271dac1414bb00000000ac1414aaac1414aa7f000001ac1e01010a010100ffffffffac1e0101000000"]}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, 0x0, 0x0, 0x2b, 0x0, [{@loopback}]}}) 00:22:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = fsopen(&(0x7f0000000080)='v7\x00', 0x1) r2 = fsmount(r1, 0x1, 0xfc) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) fsopen(&(0x7f0000000080)='v7\x00', 0x1) (async) fsmount(r1, 0x1, 0xfc) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:22:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x5}, 0x0) 00:22:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, 0x0, 0x0, 0x10, 0x0, [{@initdev}]}}) r1 = fsmount(0xffffffffffffffff, 0x0, 0xfa) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@mcast1, @loopback, 0x14, 0xc}}) 00:22:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'gretap0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="67726574da35742ecd89130300001000", @ANYRES32=0x0, @ANYBLOB="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"]}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0xd1, 0x7, 0x4, 0x1, {{0x1f, 0x4, 0x3, 0x5, 0x7c, 0x64, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast2, {[@generic={0x88, 0x8, "ebaae09a8a6b"}, @lsrr={0x83, 0x1f, 0xbd, [@empty, @empty, @loopback, @private=0xa010100, @local, @multicast2, @empty]}, @lsrr={0x83, 0xb, 0xb6, [@multicast2, @remote]}, @noop, @ssrr={0x89, 0x3, 0x8}, @end, @ssrr={0x89, 0x7, 0x2b, [@dev={0xac, 0x14, 0x14, 0x20}]}, @rr={0x7, 0x1b, 0x32, [@multicast1, @empty, @multicast2, @remote, @loopback, @rand_addr=0x64010102]}, @timestamp={0x44, 0xc, 0x12, 0x0, 0x1, [0x6, 0x1]}]}}}}}) fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) 00:22:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x2}) r3 = fsmount(r2, 0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00080007000000080000003245ad009400670000092f9078ac14141300000000860951055723343809890bdbffffffffac1e0101830658b82a870717c1640101000a010100ac141423ac1414bbac141427940401000144201f20000000dd00000002000000010000000000000008000000020000000189271dac1414bb00000000ac1414aaac1414aa7f000001ac1e01010a010100ffffffffac1e0101000000"]}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, 0x0, 0x0, 0x2b, 0x0, [{@loopback}]}}) 00:22:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = fsopen(&(0x7f0000000080)='v7\x00', 0x1) r2 = fsmount(r1, 0x1, 0xfc) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x6}, 0x0) 00:22:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}}, 0x24000000) 00:22:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x2}) r3 = fsmount(r2, 0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00080007000000080000003245ad009400670000092f9078ac14141300000000860951055723343809890bdbffffffffac1e0101830658b82a870717c1640101000a010100ac141423ac1414bbac141427940401000144201f20000000dd00000002000000010000000000000008000000020000000189271dac1414bb00000000ac1414aaac1414aa7f000001ac1e01010a010100ffffffffac1e0101000000"]}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, 0x0, 0x0, 0x2b, 0x0, [{@loopback}]}}) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r1, 0x10, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x2}) (async) fsmount(r2, 0x1, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00080007000000080000003245ad009400670000092f9078ac14141300000000860951055723343809890bdbffffffffac1e0101830658b82a870717c1640101000a010100ac141423ac1414bbac141427940401000144201f20000000dd00000002000000010000000000000008000000020000000189271dac1414bb00000000ac1414aaac1414aa7f000001ac1e01010a010100ffffffffac1e0101000000"]}) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, 0x0, 0x0, 0x2b, 0x0, [{@loopback}]}}) (async) 00:22:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x7}, 0x0) 00:22:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, 0x0, 0x0, 0x10, 0x0, [{@initdev}]}}) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0xfa) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@mcast1, @loopback, 0x14, 0xc}}) 00:22:18 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x26, 0x800, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:18 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x80000}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x800}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}}, 0x24000000) 00:22:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x10, 0xffff, 0x81, {{0x20, 0x4, 0x2, 0x39, 0x80, 0x66, 0x0, 0x4, 0x29, 0x0, @empty, @remote, {[@noop, @ssrr={0x89, 0x17, 0xaf, [@multicast2, @broadcast, @multicast1, @remote, @broadcast]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1c, 0x1, [{0x2, 0xb, "a1d582e521d7e45274"}, {0x6, 0x9, "688baf7fe1519c"}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0xd1, 0x3, 0x8, [{@broadcast, 0x7ff}, {@multicast2, 0xac94}, {@remote, 0xd76}, {@remote, 0x90a2}, {@broadcast, 0x6}, {@broadcast, 0xc2e5}]}]}}}}}) 00:22:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x9}, 0x0) 00:22:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@remote, 0x0, 0x0, 0x10, 0x0, [{@initdev}]}}) (async, rerun: 32) r1 = fsmount(0xffffffffffffffff, 0x0, 0xfa) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@mcast1, @loopback, 0x14, 0xc}}) 00:22:18 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x80000}) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r1}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x800}) (async, rerun: 64) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)) (async, rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:18 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair(0x26, 0x800, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x300}, 0x0) 00:22:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}}, 0x24000000) 00:22:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x10, 0xffff, 0x81, {{0x20, 0x4, 0x2, 0x39, 0x80, 0x66, 0x0, 0x4, 0x29, 0x0, @empty, @remote, {[@noop, @ssrr={0x89, 0x17, 0xaf, [@multicast2, @broadcast, @multicast1, @remote, @broadcast]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1c, 0x1, [{0x2, 0xb, "a1d582e521d7e45274"}, {0x6, 0x9, "688baf7fe1519c"}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0xd1, 0x3, 0x8, [{@broadcast, 0x7ff}, {@multicast2, 0xac94}, {@remote, 0xd76}, {@remote, 0x90a2}, {@broadcast, 0x6}, {@broadcast, 0xc2e5}]}]}}}}}) 00:22:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x1, 0x0, 0x80, 0x0, [{@dev}, {@broadcast}, {@multicast1}, {@broadcast}, {@broadcast}, {@empty}, {@local}, {@multicast1}]}}) 00:22:19 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x80000}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x800}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x80000}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r0}) (async) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r1}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x800}) (async) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:19 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x26, 0x800, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x500}, 0x0) 00:22:19 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80802, 0x0) r0 = socket$inet(0x2, 0x6, 0xffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'gre0\x00', 0x0}) 00:22:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x10, 0xffff, 0x81, {{0x20, 0x4, 0x2, 0x39, 0x80, 0x66, 0x0, 0x4, 0x29, 0x0, @empty, @remote, {[@noop, @ssrr={0x89, 0x17, 0xaf, [@multicast2, @broadcast, @multicast1, @remote, @broadcast]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1c, 0x1, [{0x2, 0xb, "a1d582e521d7e45274"}, {0x6, 0x9, "688baf7fe1519c"}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0xd1, 0x3, 0x8, [{@broadcast, 0x7ff}, {@multicast2, 0xac94}, {@remote, 0xd76}, {@remote, 0x90a2}, {@broadcast, 0x6}, {@broadcast, 0xc2e5}]}]}}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x10, 0xffff, 0x81, {{0x20, 0x4, 0x2, 0x39, 0x80, 0x66, 0x0, 0x4, 0x29, 0x0, @empty, @remote, {[@noop, @ssrr={0x89, 0x17, 0xaf, [@multicast2, @broadcast, @multicast1, @remote, @broadcast]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1c, 0x1, [{0x2, 0xb, "a1d582e521d7e45274"}, {0x6, 0x9, "688baf7fe1519c"}, {0x1, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0xd1, 0x3, 0x8, [{@broadcast, 0x7ff}, {@multicast2, 0xac94}, {@remote, 0xd76}, {@remote, 0x90a2}, {@broadcast, 0x6}, {@broadcast, 0xc2e5}]}]}}}}}) (async) 00:22:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x1, 0x0, 0x80, 0x0, [{@dev}, {@broadcast}, {@multicast1}, {@broadcast}, {@broadcast}, {@empty}, {@local}, {@multicast1}]}}) 00:22:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000001c0)={0x45c, 0xb, 0x4, 0x800, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x7, 0x20, 0x1, 0x1, "f24743a6"}, 0xc2, 0x4, {}, 0x7}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x9, 0xfffffff7, 0x38, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x7840, 0x8000, 0x33a2, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x20, 0x20, 0xabf1, 0x7ff, {{0xb, 0x4, 0x1, 0x0, 0x2c, 0x66, 0x0, 0x3f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0xd, "f84d0070373f80b5f4ee95"}, @ra={0x94, 0x4}, @noop, @end, @ra={0x94, 0x4, 0x1}]}}}}}) 00:22:19 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80802, 0x0) r0 = socket$inet(0x2, 0x6, 0xffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'gre0\x00', 0x0}) 00:22:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x600}, 0x0) 00:22:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x72) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000480)={0x89, r1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x6, 0x81, {{0x29, 0x4, 0x0, 0x8, 0xa4, 0x67, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@noop, @rr={0x7, 0x27, 0x71, [@multicast1, @multicast1, @loopback, @rand_addr=0x64010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @remote]}, @timestamp_addr={0x44, 0x44, 0x6b, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@local, 0xfffffffc}, {@multicast1, 0x10000}, {@rand_addr=0x64010102}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x100}, {@rand_addr=0x64010101, 0x9}]}, @ssrr={0x89, 0x23, 0x46, [@multicast2, @private=0xa010101, @loopback, @broadcast, @multicast2, @local, @rand_addr=0x64010101, @multicast2]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="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"]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/238, 0xee, 0x0, &(0x7f00000001c0)=""/173, 0xad}}, 0x10) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000880)={&(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1c, 0x0, 0xfffffffd, 0x7, 0x30, 0xffffffffffffffff, 0x6, '\x00', r4, r5, 0x5, 0x3, 0x2}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000cc0)={&(0x7f0000000c80)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d40)={r7, &(0x7f0000000c00)="782cfb5dbe5ae41751b6949f8e6159dba9fc851e008f87f792d785ed363354807489e475e86ecd3bf97326d256c6cbd973ddcc2f7695d240900c4a75e1a727fe7a24d2b2e2d4d7324ef6561a5e17335ad93426aeff2c8ea06c648a1b4d86ee7762069d346d1df5fab8cec4a065718eb332f090017627", &(0x7f0000000d00)=@udp6=r8, 0x1}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x10000, 0x0, 0x800, 0x204, r1, 0x7f, '\x00', r3, r1, 0x2, 0x2, 0x0, 0x2}, 0x48) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11, 0x4, 0x8, 0x3, 0x404, r1, 0x2, '\x00', r4, r2, 0x5, 0x1, 0x4}, 0x48) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x7, &(0x7f00000006c0)=@raw=[@ldst={0x1, 0x2, 0x9dd62c9199d868a1, 0x8, 0x7, 0x80, 0x1}, @ldst={0x1, 0x2, 0x6, 0x4, 0x6, 0xffffffffffffffff, 0x8}, @alu={0x4, 0x1, 0x4, 0x1, 0x8, 0xfffffffffffffff0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @exit, @exit], &(0x7f0000000700)='syzkaller\x00', 0x4, 0x68, &(0x7f0000000740)=""/104, 0x41100, 0x10, '\x00', 0x0, 0x1c, r5, 0x8, &(0x7f00000007c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x6, 0x400}, 0x10, 0xf718, 0xffffffffffffffff, 0x9, &(0x7f00000009c0)=[r2, r6, r9, r2, r10, r11, r12, r2], &(0x7f0000000a00)=[{0x4, 0x3, 0x2, 0x8}, {0x3, 0x3, 0xa}, {0x3, 0x1, 0x6, 0x9}, {0x0, 0x5, 0x1}, {0x4, 0x5, 0xf, 0xb}, {0x0, 0x2, 0xf}, {0x1, 0x2, 0xa, 0xef44ab8b73fc1413}, {0x0, 0x5, 0xa, 0x1}, {0x5, 0x4, 0xe, 0x9}], 0x10, 0x400}, 0x90) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="fb4301b048a3712e58fbc2a8ee63a3128042248bbe058e4ef8567d3585ddb49bf56348b42d3ec426cc12d72527c1cd80b8741b88fb2350318a596653074890ccacc8b9b20bd53ade15fda985fef13c9a733a960dd010c68c5c3744b33b3f7195da02c3e5b56a07fe3ea81b59c6538e6dafdc06a7b5a69905e1ee163983a34e75073da4aeecb86a08c5a580fe2d91fec3ed4b170964e3d0b0864391a268cfd5454dfcbacb6c729fb70b797e32c1ed3b25ec110575edfff3cfaa495364c428c985eb15fa28140a5e05f5b9ac16b626edbe2d42c2164585571b9372acd6f2fe70", @ANYRES16=0x0, @ANYBLOB="0000000000000000000014000000"], 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r13, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4002) 00:22:19 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x1, 0x0, 0x80, 0x0, [{@dev}, {@broadcast}, {@multicast1}, {@broadcast}, {@broadcast}, {@empty}, {@local}, {@multicast1}]}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x1, 0x0, 0x80, 0x0, [{@dev}, {@broadcast}, {@multicast1}, {@broadcast}, {@broadcast}, {@empty}, {@local}, {@multicast1}]}}) (async) 00:22:19 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x8000, r0, 0x2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8903, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:22:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x700}, 0x0) 00:22:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000001c0)={0x45c, 0xb, 0x4, 0x800, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x7, 0x20, 0x1, 0x1, "f24743a6"}, 0xc2, 0x4, {}, 0x7}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x9, 0xfffffff7, 0x38, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x7840, 0x8000, 0x33a2, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x20, 0x20, 0xabf1, 0x7ff, {{0xb, 0x4, 0x1, 0x0, 0x2c, 0x66, 0x0, 0x3f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0xd, "f84d0070373f80b5f4ee95"}, @ra={0x94, 0x4}, @noop, @end, @ra={0x94, 0x4, 0x1}]}}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000001c0)={0x45c, 0xb, 0x4, 0x800, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x7, 0x20, 0x1, 0x1, "f24743a6"}, 0xc2, 0x4, {}, 0x7}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x9, 0xfffffff7, 0x38, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x7840, 0x8000, 0x33a2, 0x1}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x20, 0x20, 0xabf1, 0x7ff, {{0xb, 0x4, 0x1, 0x0, 0x2c, 0x66, 0x0, 0x3f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0xd, "f84d0070373f80b5f4ee95"}, @ra={0x94, 0x4}, @noop, @end, @ra={0x94, 0x4, 0x1}]}}}}}) (async) 00:22:19 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80802, 0x0) (async) r0 = socket$inet(0x2, 0x6, 0xffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'gre0\x00', 0x0}) 00:22:19 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x8000, r0, 0x2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8903, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:22:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x900}, 0x0) 00:22:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private2, @broadcast, 0x1f, 0x1b}}) 00:22:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000001c0)={0x45c, 0xb, 0x4, 0x800, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x7, 0x20, 0x1, 0x1, "f24743a6"}, 0xc2, 0x4, {}, 0x7}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x9, 0xfffffff7, 0x38, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x7840, 0x8000, 0x33a2, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x20, 0x20, 0xabf1, 0x7ff, {{0xb, 0x4, 0x1, 0x0, 0x2c, 0x66, 0x0, 0x3f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0xd, "f84d0070373f80b5f4ee95"}, @ra={0x94, 0x4}, @noop, @end, @ra={0x94, 0x4, 0x1}]}}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000001c0)={0x45c, 0xb, 0x4, 0x800, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x7, 0x20, 0x1, 0x1, "f24743a6"}, 0xc2, 0x4, {}, 0x7}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x9, 0xfffffff7, 0x38, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x7840, 0x8000, 0x33a2, 0x1}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000000c0)={'syztnl0\x00', r2, 0x20, 0x20, 0xabf1, 0x7ff, {{0xb, 0x4, 0x1, 0x0, 0x2c, 0x66, 0x0, 0x3f, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0xd, "f84d0070373f80b5f4ee95"}, @ra={0x94, 0x4}, @noop, @end, @ra={0x94, 0x4, 0x1}]}}}}}) (async) 00:22:19 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8906, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x1, 0x10001, {{0x2b, 0x4, 0x1, 0x4, 0xac, 0x67, 0x0, 0xff, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, {[@timestamp={0x44, 0x14, 0x81, 0x0, 0x4, [0x3e86, 0x6, 0xf1, 0x5]}, @cipso={0x86, 0x1f, 0x3, [{0x5, 0xd, "989771a62dff84f1ad3477"}, {0x6, 0x4, "b9d6"}, {0x0, 0x8, "72b73bc0c4e5"}]}, @timestamp_prespec={0x44, 0x3c, 0xc5, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}, {@loopback, 0x1}, {@local, 0x7}, {@remote, 0x10001}, {@remote, 0x10000}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1ff}]}, @lsrr={0x83, 0x7, 0xe8, [@multicast2]}, @timestamp={0x44, 0x20, 0x9, 0x0, 0x3, [0x7fffffff, 0xffff, 0x400, 0xffff0001, 0x0, 0x6, 0x9]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="58baaf246e6c32000000000000000000", @ANYRES32=r3, @ANYBLOB="00100007000068d200000878466c00180064000004049078ffffffff6401010294040100"]}) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000240)={0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2810}, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0xdf1, 0x0, 0x8c0, r0, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x8}, 0x48) 00:22:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x2792}, 0x0) 00:22:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0x72) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000480)={0x89, r1}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x6, 0x81, {{0x29, 0x4, 0x0, 0x8, 0xa4, 0x67, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@noop, @rr={0x7, 0x27, 0x71, [@multicast1, @multicast1, @loopback, @rand_addr=0x64010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @remote]}, @timestamp_addr={0x44, 0x44, 0x6b, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@local, 0xfffffffc}, {@multicast1, 0x10000}, {@rand_addr=0x64010102}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x100}, {@rand_addr=0x64010101, 0x9}]}, @ssrr={0x89, 0x23, 0x46, [@multicast2, @private=0xa010101, @loopback, @broadcast, @multicast2, @local, @rand_addr=0x64010101, @multicast2]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="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"]}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/238, 0xee, 0x0, &(0x7f00000001c0)=""/173, 0xad}}, 0x10) (async) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000880)={&(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1c, 0x0, 0xfffffffd, 0x7, 0x30, 0xffffffffffffffff, 0x6, '\x00', r4, r5, 0x5, 0x3, 0x2}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000cc0)={&(0x7f0000000c80)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d40)={r7, &(0x7f0000000c00)="782cfb5dbe5ae41751b6949f8e6159dba9fc851e008f87f792d785ed363354807489e475e86ecd3bf97326d256c6cbd973ddcc2f7695d240900c4a75e1a727fe7a24d2b2e2d4d7324ef6561a5e17335ad93426aeff2c8ea06c648a1b4d86ee7762069d346d1df5fab8cec4a065718eb332f090017627", &(0x7f0000000d00)=@udp6=r8, 0x1}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x10000, 0x0, 0x800, 0x204, r1, 0x7f, '\x00', r3, r1, 0x2, 0x2, 0x0, 0x2}, 0x48) (async) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11, 0x4, 0x8, 0x3, 0x404, r1, 0x2, '\x00', r4, r2, 0x5, 0x1, 0x4}, 0x48) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x7, &(0x7f00000006c0)=@raw=[@ldst={0x1, 0x2, 0x9dd62c9199d868a1, 0x8, 0x7, 0x80, 0x1}, @ldst={0x1, 0x2, 0x6, 0x4, 0x6, 0xffffffffffffffff, 0x8}, @alu={0x4, 0x1, 0x4, 0x1, 0x8, 0xfffffffffffffff0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @exit, @exit], &(0x7f0000000700)='syzkaller\x00', 0x4, 0x68, &(0x7f0000000740)=""/104, 0x41100, 0x10, '\x00', 0x0, 0x1c, r5, 0x8, &(0x7f00000007c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x6, 0x400}, 0x10, 0xf718, 0xffffffffffffffff, 0x9, &(0x7f00000009c0)=[r2, r6, r9, r2, r10, r11, r12, r2], &(0x7f0000000a00)=[{0x4, 0x3, 0x2, 0x8}, {0x3, 0x3, 0xa}, {0x3, 0x1, 0x6, 0x9}, {0x0, 0x5, 0x1}, {0x4, 0x5, 0xf, 0xb}, {0x0, 0x2, 0xf}, {0x1, 0x2, 0xa, 0xef44ab8b73fc1413}, {0x0, 0x5, 0xa, 0x1}, {0x5, 0x4, 0xe, 0x9}], 0x10, 0x400}, 0x90) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="fb4301b048a3712e58fbc2a8ee63a3128042248bbe058e4ef8567d3585ddb49bf56348b42d3ec426cc12d72527c1cd80b8741b88fb2350318a596653074890ccacc8b9b20bd53ade15fda985fef13c9a733a960dd010c68c5c3744b33b3f7195da02c3e5b56a07fe3ea81b59c6538e6dafdc06a7b5a69905e1ee163983a34e75073da4aeecb86a08c5a580fe2d91fec3ed4b170964e3d0b0864391a268cfd5454dfcbacb6c729fb70b797e32c1ed3b25ec110575edfff3cfaa495364c428c985eb15fa28140a5e05f5b9ac16b626edbe2d42c2164585571b9372acd6f2fe70", @ANYRES16=0x0, @ANYBLOB="0000000000000000000014000000"], 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r13, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4002) 00:22:19 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x8000, r0, 0x2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8903, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:22:19 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8906, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x1, 0x10001, {{0x2b, 0x4, 0x1, 0x4, 0xac, 0x67, 0x0, 0xff, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, {[@timestamp={0x44, 0x14, 0x81, 0x0, 0x4, [0x3e86, 0x6, 0xf1, 0x5]}, @cipso={0x86, 0x1f, 0x3, [{0x5, 0xd, "989771a62dff84f1ad3477"}, {0x6, 0x4, "b9d6"}, {0x0, 0x8, "72b73bc0c4e5"}]}, @timestamp_prespec={0x44, 0x3c, 0xc5, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}, {@loopback, 0x1}, {@local, 0x7}, {@remote, 0x10001}, {@remote, 0x10000}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1ff}]}, @lsrr={0x83, 0x7, 0xe8, [@multicast2]}, @timestamp={0x44, 0x20, 0x9, 0x0, 0x3, [0x7fffffff, 0xffff, 0x400, 0xffff0001, 0x0, 0x6, 0x9]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="58baaf246e6c32000000000000000000", @ANYRES32=r3, @ANYBLOB="00100007000068d200000878466c00180064000004049078ffffffff6401010294040100"]}) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000240)={0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2810}, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0xdf1, 0x0, 0x8c0, r0, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x8}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8906, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x1, 0x10001, {{0x2b, 0x4, 0x1, 0x4, 0xac, 0x67, 0x0, 0xff, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, {[@timestamp={0x44, 0x14, 0x81, 0x0, 0x4, [0x3e86, 0x6, 0xf1, 0x5]}, @cipso={0x86, 0x1f, 0x3, [{0x5, 0xd, "989771a62dff84f1ad3477"}, {0x6, 0x4, "b9d6"}, {0x0, 0x8, "72b73bc0c4e5"}]}, @timestamp_prespec={0x44, 0x3c, 0xc5, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}, {@loopback, 0x1}, {@local, 0x7}, {@remote, 0x10001}, {@remote, 0x10000}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1ff}]}, @lsrr={0x83, 0x7, 0xe8, [@multicast2]}, @timestamp={0x44, 0x20, 0x9, 0x0, 0x3, [0x7fffffff, 0xffff, 0x400, 0xffff0001, 0x0, 0x6, 0x9]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="58baaf246e6c32000000000000000000", @ANYRES32=r3, @ANYBLOB="00100007000068d200000878466c00180064000004049078ffffffff6401010294040100"]}) (async) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000240)={0x0}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2810}, 0x8000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0xdf1, 0x0, 0x8c0, r0, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x8}, 0x48) (async) 00:22:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private2, @broadcast, 0x1f, 0x1b}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private2, @broadcast, 0x1f, 0x1b}}) (async) 00:22:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x4000}, 0x0) 00:22:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'gretap0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newroute={0x48, 0x18, 0x4, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x3f, 0xff, 0x4, 0xfe, 0xa, 0x3000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @RTA_IIF={0x8}, @RTA_UID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 00:22:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x6, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0x72) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000480)={0x89, r1}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x6, 0x81, {{0x29, 0x4, 0x0, 0x8, 0xa4, 0x67, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@noop, @rr={0x7, 0x27, 0x71, [@multicast1, @multicast1, @loopback, @rand_addr=0x64010102, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @multicast1, @remote]}, @timestamp_addr={0x44, 0x44, 0x6b, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@local, 0xfffffffc}, {@multicast1, 0x10000}, {@rand_addr=0x64010102}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@local, 0x100}, {@rand_addr=0x64010101, 0x9}]}, @ssrr={0x89, 0x23, 0x46, [@multicast2, @private=0xa010101, @loopback, @broadcast, @multicast2, @local, @rand_addr=0x64010101, @multicast2]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000d80)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="000000070000000000000009481e006000680000002990787f000001ac14140d070fba7f000001ac141424ac1414bb8323d8ac1614bbac141433ffffffff7f000001e0000002ac1414aaafd74ff885df9bbb7239471f111ce11e0101ac14142489074a0000000094040000070fd4cf55f393eafeae3d6401010160e26b8f2911dc2f0b6d9c6248eea6a198046400bd626a50355a81274ca3b9c284a78dcfebb2136b6c4ee10d00bf3fc5071533fdfc0c76ba879b61663729b95decf04cac250cd8db36813875a10a4f6b67500f59a127cf15a58f8b9486b9fc69731653194c17e8a55bebb96a45742e61a998f20e9ddd71fb37a19287cac38ac0c1c550dda424165ad59d2931ff661583e296d6556487ff9987a19316f1834992018b52570b0852bf0f737573741faf8c4d565329cfa678efa08bf6a4aa1878c711a3a894cde01253b280113917cb2d"]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x20, &(0x7f0000000100)={&(0x7f0000000000)=""/238, 0xee, 0x0, &(0x7f00000001c0)=""/173, 0xad}}, 0x10) (async) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000880)={&(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1c, 0x0, 0xfffffffd, 0x7, 0x30, 0xffffffffffffffff, 0x6, '\x00', r4, r5, 0x5, 0x3, 0x2}, 0x48) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000cc0)={&(0x7f0000000c80)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000d40)={r7, &(0x7f0000000c00)="782cfb5dbe5ae41751b6949f8e6159dba9fc851e008f87f792d785ed363354807489e475e86ecd3bf97326d256c6cbd973ddcc2f7695d240900c4a75e1a727fe7a24d2b2e2d4d7324ef6561a5e17335ad93426aeff2c8ea06c648a1b4d86ee7762069d346d1df5fab8cec4a065718eb332f090017627", &(0x7f0000000d00)=@udp6=r8, 0x1}, 0x20) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x10000, 0x0, 0x800, 0x204, r1, 0x7f, '\x00', r3, r1, 0x2, 0x2, 0x0, 0x2}, 0x48) (async) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x11, 0x4, 0x8, 0x3, 0x404, r1, 0x2, '\x00', r4, r2, 0x5, 0x1, 0x4}, 0x48) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_tracing={0x1a, 0x7, &(0x7f00000006c0)=@raw=[@ldst={0x1, 0x2, 0x9dd62c9199d868a1, 0x8, 0x7, 0x80, 0x1}, @ldst={0x1, 0x2, 0x6, 0x4, 0x6, 0xffffffffffffffff, 0x8}, @alu={0x4, 0x1, 0x4, 0x1, 0x8, 0xfffffffffffffff0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x5}, @exit, @exit], &(0x7f0000000700)='syzkaller\x00', 0x4, 0x68, &(0x7f0000000740)=""/104, 0x41100, 0x10, '\x00', 0x0, 0x1c, r5, 0x8, &(0x7f00000007c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x10, 0x6, 0x400}, 0x10, 0xf718, 0xffffffffffffffff, 0x9, &(0x7f00000009c0)=[r2, r6, r9, r2, r10, r11, r12, r2], &(0x7f0000000a00)=[{0x4, 0x3, 0x2, 0x8}, {0x3, 0x3, 0xa}, {0x3, 0x1, 0x6, 0x9}, {0x0, 0x5, 0x1}, {0x4, 0x5, 0xf, 0xb}, {0x0, 0x2, 0xf}, {0x1, 0x2, 0xa, 0xef44ab8b73fc1413}, {0x0, 0x5, 0xa, 0x1}, {0x5, 0x4, 0xe, 0x9}], 0x10, 0x400}, 0x90) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="fb4301b048a3712e58fbc2a8ee63a3128042248bbe058e4ef8567d3585ddb49bf56348b42d3ec426cc12d72527c1cd80b8741b88fb2350318a596653074890ccacc8b9b20bd53ade15fda985fef13c9a733a960dd010c68c5c3744b33b3f7195da02c3e5b56a07fe3ea81b59c6538e6dafdc06a7b5a69905e1ee163983a34e75073da4aeecb86a08c5a580fe2d91fec3ed4b170964e3d0b0864391a268cfd5454dfcbacb6c729fb70b797e32c1ed3b25ec110575edfff3cfaa495364c428c985eb15fa28140a5e05f5b9ac16b626edbe2d42c2164585571b9372acd6f2fe70", @ANYRES16=0x0, @ANYBLOB="0000000000000000000014000000"], 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r13, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4002) 00:22:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private2, @broadcast, 0x1f, 0x1b}}) 00:22:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x9227}, 0x0) 00:22:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'gretap0\x00', 0x0}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newroute={0x48, 0x18, 0x4, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x3f, 0xff, 0x4, 0xfe, 0xa, 0x3000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @RTA_IIF={0x8}, @RTA_UID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 00:22:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) socketpair(0x6, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x80000, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x7, 0x6, {{0x32, 0x4, 0x1, 0x12, 0xc8, 0x64, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @broadcast, {[@generic={0x82, 0xe, "01c8b03e07df83a6c285aaba"}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x6, [{@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010102, 0x4}]}, @lsrr={0x83, 0xf, 0xd, [@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @cipso={0x86, 0x52, 0x1, [{0x1, 0x7, "1d1e1d9c37"}, {0x1, 0xd, "a6d36f22978dceb79586f7"}, {0x2, 0xc, "722943ac5a87961cda7e"}, {0x0, 0xc, "3d64721414e31f4bf440"}, {0x0, 0x10, "2683d3822b04f575477a2e725bc9"}, {0x5, 0x10, "c6c6f0e37fff6146013d61f12d1d"}]}, @timestamp_addr={0x44, 0x14, 0xb3, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x400}, {@remote, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0xc7, 0x3, 0x7, [{@rand_addr=0x64010101, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3f}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r2, 0x0, 0x700, 0x1, 0xffffffff, {{0x20, 0x4, 0x3, 0x21, 0x80, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@end, @cipso={0x86, 0x24, 0x3, [{0x2, 0x10, "917bd593753c07e16686eb7304df"}, {0x6, 0xe, "6fcee78f6456d4e53aebbe01"}]}, @ssrr={0x89, 0x7, 0xef, [@private=0xa010101]}, @lsrr={0x83, 0x1f, 0x1d, [@empty, @local, @empty, @broadcast, @remote, @multicast1, @remote]}, @timestamp_addr={0x44, 0x14, 0x55, 0x1, 0x0, [{@multicast2, 0x6}, {@loopback, 0x4}]}, @ssrr={0x89, 0xb, 0xfe, [@multicast1, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x34000}, 0x0) 00:22:19 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8906, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x40, 0x7, 0x1, 0x10001, {{0x2b, 0x4, 0x1, 0x4, 0xac, 0x67, 0x0, 0xff, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2, {[@timestamp={0x44, 0x14, 0x81, 0x0, 0x4, [0x3e86, 0x6, 0xf1, 0x5]}, @cipso={0x86, 0x1f, 0x3, [{0x5, 0xd, "989771a62dff84f1ad3477"}, {0x6, 0x4, "b9d6"}, {0x0, 0x8, "72b73bc0c4e5"}]}, @timestamp_prespec={0x44, 0x3c, 0xc5, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3f}, {@loopback, 0x1}, {@local, 0x7}, {@remote, 0x10001}, {@remote, 0x10000}, {@private=0xa010101, 0x3}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1ff}]}, @lsrr={0x83, 0x7, 0xe8, [@multicast2]}, @timestamp={0x44, 0x20, 0x9, 0x0, 0x3, [0x7fffffff, 0xffff, 0x400, 0xffff0001, 0x0, 0x6, 0x9]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000400)={'syztnl1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="58baaf246e6c32000000000000000000", @ANYRES32=r3, @ANYBLOB="00100007000068d200000878466c00180064000004049078ffffffff6401010294040100"]}) (async) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000240)={0x0}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x2810}, 0x8000) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x9, 0xdf1, 0x0, 0x8c0, r0, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x8}, 0x48) 00:22:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=0x64010100, 0x1, 0x10}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff0100783561ff6072ab0d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1e0000000000000000000000000000ac141400000000000000000000000000ac1414aa000000000000000000000000ac141400"/160]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x1, 0x7800, 0xfff, 0x20, {{0x10, 0x4, 0x2, 0x18, 0x40, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x61, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @cipso={0x86, 0x20, 0x3, [{0x7, 0x11, "66983a50b3bf0e309015240df4408f"}, {0x2, 0x9, "bb7c5748436935"}]}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x5, 0x0, 0x1, 0x4, 0x4}], &(0x7f00000002c0)='GPL\x00', 0x4c, 0x1f, &(0x7f0000000300)=""/31, 0x40f00, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0xfffffff8, 0x80}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r2], &(0x7f0000000400)=[{0x3, 0x2, 0xa, 0x1}, {0x0, 0x5, 0x2, 0xa}], 0x10, 0x81}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@cgroup, r1, 0x18, 0x2, r5, @prog_id=0xffffffffffffffff}, 0x20) 00:22:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'gretap0\x00', 0x0}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newroute={0x48, 0x18, 0x4, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x20, 0x3f, 0xff, 0x4, 0xfe, 0xa, 0x3000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @RTA_IIF={0x8}, @RTA_UID={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 00:22:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x6, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair(0x6, 0xa, 0x0, &(0x7f0000000000)) (async) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x400300}, 0x0) 00:22:19 executing program 0: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x46340, 0x0) write$tcp_congestion(r1, &(0x7f0000000040)='nv\x00', 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="6700000000007a4735019a50834a99b780fe2d593b064a0073e018b39a1f671921cc249033c27c9473ef501838bab59dc0c2971605738b6bf5e2a300003a8b64a3217fbf62f38c849b30ff69bbcf12c40148fb42693251188a6dd042d754caa3d2a2c76b50622ea201592f", @ANYRES32=0x0, @ANYBLOB="78e07800000000080000000840b500800066000002299078ac1414bbac1e00018614fffffffc0e051ad9ac02099fc2a8d24e840f071f10e0000002e00000027f000001ac1414bbac1414bbac1414aa0a010100830bd300000000ac1e01014424dd03e0000002000000060a010101000000200a01010100000009ffffffff000000a60707f8e0000001000000"]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000080)="9b70e8f1f03a3109922b9038fb8ee51ac928763679f6f8ec0bf9479a20402bcdf47096ffe5e7ebd0f7b7acefaa2e4bcd5d2c847effc018de8643f61b00b2ecf3a72fbd4e823c4cbc0f935e68e662e2e7782737b947e0ad69670d348e495c71", &(0x7f0000000100)=@tcp=r1, 0x2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=0x64010100, 0x1, 0x10}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff0100783561ff6072ab0d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1e0000000000000000000000000000ac141400000000000000000000000000ac1414aa000000000000000000000000ac141400"/160]}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x1, 0x7800, 0xfff, 0x20, {{0x10, 0x4, 0x2, 0x18, 0x40, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x61, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @cipso={0x86, 0x20, 0x3, [{0x7, 0x11, "66983a50b3bf0e309015240df4408f"}, {0x2, 0x9, "bb7c5748436935"}]}]}}}}}) (rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x5, 0x0, 0x1, 0x4, 0x4}], &(0x7f00000002c0)='GPL\x00', 0x4c, 0x1f, &(0x7f0000000300)=""/31, 0x40f00, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0xfffffff8, 0x80}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r2], &(0x7f0000000400)=[{0x3, 0x2, 0xa, 0x1}, {0x0, 0x5, 0x2, 0xa}], 0x10, 0x81}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@cgroup, r1, 0x18, 0x2, r5, @prog_id=0xffffffffffffffff}, 0x20) 00:22:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x1000000}, 0x0) 00:22:19 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8906, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) r2 = gettid() r3 = gettid() syz_open_procfs$namespace(r3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_NEWNSID={0x3c, 0x58, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x40) 00:22:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@local, @remote, 0x7, 0x1c}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="64010100000000008000000000000000ac141400000000000000000000000000ffffffff000000000000000000000000ac473447f012903bdfb635ad180c1414aa0000000000000000005d5c8a000000000000000000000000007f002f689103c9d0885d11000000000000000000ac1414000000000000000000d16f78907cec98932f25edb6ed802f610690f5e881e5fe2a4298ee202aec5d2e6dd3b4f4c5ac57407b0f4d425bbf66b4be0111c2f330f1ec05b280f1f22cf6156328a5de9b3dde664c7a527f04643a2b1d01f780"]}) socket$inet6(0xa, 0x5, 0x1) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x1, 0x2}, 0x10) 00:22:19 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x80000, 0x6) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x7, 0x6, {{0x32, 0x4, 0x1, 0x12, 0xc8, 0x64, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @broadcast, {[@generic={0x82, 0xe, "01c8b03e07df83a6c285aaba"}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x6, [{@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010102, 0x4}]}, @lsrr={0x83, 0xf, 0xd, [@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @cipso={0x86, 0x52, 0x1, [{0x1, 0x7, "1d1e1d9c37"}, {0x1, 0xd, "a6d36f22978dceb79586f7"}, {0x2, 0xc, "722943ac5a87961cda7e"}, {0x0, 0xc, "3d64721414e31f4bf440"}, {0x0, 0x10, "2683d3822b04f575477a2e725bc9"}, {0x5, 0x10, "c6c6f0e37fff6146013d61f12d1d"}]}, @timestamp_addr={0x44, 0x14, 0xb3, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x400}, {@remote, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0xc7, 0x3, 0x7, [{@rand_addr=0x64010101, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3f}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r2, 0x0, 0x700, 0x1, 0xffffffff, {{0x20, 0x4, 0x3, 0x21, 0x80, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@end, @cipso={0x86, 0x24, 0x3, [{0x2, 0x10, "917bd593753c07e16686eb7304df"}, {0x6, 0xe, "6fcee78f6456d4e53aebbe01"}]}, @ssrr={0x89, 0x7, 0xef, [@private=0xa010101]}, @lsrr={0x83, 0x1f, 0x1d, [@empty, @local, @empty, @broadcast, @remote, @multicast1, @remote]}, @timestamp_addr={0x44, 0x14, 0x55, 0x1, 0x0, [{@multicast2, 0x6}, {@loopback, 0x4}]}, @ssrr={0x89, 0xb, 0xfe, [@multicast1, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x80000, 0x6) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x7, 0x6, {{0x32, 0x4, 0x1, 0x12, 0xc8, 0x64, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @broadcast, {[@generic={0x82, 0xe, "01c8b03e07df83a6c285aaba"}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x6, [{@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010102, 0x4}]}, @lsrr={0x83, 0xf, 0xd, [@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @cipso={0x86, 0x52, 0x1, [{0x1, 0x7, "1d1e1d9c37"}, {0x1, 0xd, "a6d36f22978dceb79586f7"}, {0x2, 0xc, "722943ac5a87961cda7e"}, {0x0, 0xc, "3d64721414e31f4bf440"}, {0x0, 0x10, "2683d3822b04f575477a2e725bc9"}, {0x5, 0x10, "c6c6f0e37fff6146013d61f12d1d"}]}, @timestamp_addr={0x44, 0x14, 0xb3, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x400}, {@remote, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0xc7, 0x3, 0x7, [{@rand_addr=0x64010101, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3f}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r2, 0x0, 0x700, 0x1, 0xffffffff, {{0x20, 0x4, 0x3, 0x21, 0x80, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@end, @cipso={0x86, 0x24, 0x3, [{0x2, 0x10, "917bd593753c07e16686eb7304df"}, {0x6, 0xe, "6fcee78f6456d4e53aebbe01"}]}, @ssrr={0x89, 0x7, 0xef, [@private=0xa010101]}, @lsrr={0x83, 0x1f, 0x1d, [@empty, @local, @empty, @broadcast, @remote, @multicast1, @remote]}, @timestamp_addr={0x44, 0x14, 0x55, 0x1, 0x0, [{@multicast2, 0x6}, {@loopback, 0x4}]}, @ssrr={0x89, 0xb, 0xfe, [@multicast1, @remote]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:19 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8906, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) r2 = gettid() r3 = gettid() syz_open_procfs$namespace(r3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_NEWNSID={0x3c, 0x58, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8906, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80800}) (async) gettid() (async) gettid() (async) syz_open_procfs$namespace(r3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_NEWNSID={0x3c, 0x58, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x40) (async) 00:22:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x2000000}, 0x0) 00:22:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @local}, @rand_addr=0x64010100, 0x1, 0x10}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff0100783561ff6072ab0d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac14140000000000000000000000000000000000000000000000000000000000ac1e0000000000000000000000000000ac141400000000000000000000000000ac1414aa000000000000000000000000ac141400"/160]}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x1, 0x7800, 0xfff, 0x20, {{0x10, 0x4, 0x2, 0x18, 0x40, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x61, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @cipso={0x86, 0x20, 0x3, [{0x7, 0x11, "66983a50b3bf0e309015240df4408f"}, {0x2, 0x9, "bb7c5748436935"}]}]}}}}}) (rerun: 32) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000280)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x5, 0x0, 0x1, 0x4, 0x4}], &(0x7f00000002c0)='GPL\x00', 0x4c, 0x1f, &(0x7f0000000300)=""/31, 0x40f00, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0xfffffff8, 0x80}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[r1, r2], &(0x7f0000000400)=[{0x3, 0x2, 0xa, 0x1}, {0x0, 0x5, 0x2, 0xa}], 0x10, 0x81}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@cgroup, r1, 0x18, 0x2, r5, @prog_id=0xffffffffffffffff}, 0x20) 00:22:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x3000000}, 0x0) 00:22:20 executing program 0: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x46340, 0x0) write$tcp_congestion(r1, &(0x7f0000000040)='nv\x00', 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="6700000000007a4735019a50834a99b780fe2d593b064a0073e018b39a1f671921cc249033c27c9473ef501838bab59dc0c2971605738b6bf5e2a300003a8b64a3217fbf62f38c849b30ff69bbcf12c40148fb42693251188a6dd042d754caa3d2a2c76b50622ea201592f", @ANYRES32=0x0, @ANYBLOB="78e07800000000080000000840b500800066000002299078ac1414bbac1e00018614fffffffc0e051ad9ac02099fc2a8d24e840f071f10e0000002e00000027f000001ac1414bbac1414bbac1414aa0a010100830bd300000000ac1e01014424dd03e0000002000000060a010101000000200a01010100000009ffffffff000000a60707f8e0000001000000"]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000080)="9b70e8f1f03a3109922b9038fb8ee51ac928763679f6f8ec0bf9479a20402bcdf47096ffe5e7ebd0f7b7acefaa2e4bcd5d2c847effc018de8643f61b00b2ecf3a72fbd4e823c4cbc0f935e68e662e2e7782737b947e0ad69670d348e495c71", &(0x7f0000000100)=@tcp=r1, 0x2}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x46340, 0x0) (async) write$tcp_congestion(r1, &(0x7f0000000040)='nv\x00', 0x3) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="6700000000007a4735019a50834a99b780fe2d593b064a0073e018b39a1f671921cc249033c27c9473ef501838bab59dc0c2971605738b6bf5e2a300003a8b64a3217fbf62f38c849b30ff69bbcf12c40148fb42693251188a6dd042d754caa3d2a2c76b50622ea201592f", @ANYRES32=0x0, @ANYBLOB="78e07800000000080000000840b500800066000002299078ac1414bbac1e00018614fffffffc0e051ad9ac02099fc2a8d24e840f071f10e0000002e00000027f000001ac1414bbac1414bbac1414aa0a010100830bd300000000ac1e01014424dd03e0000002000000060a010101000000200a01010100000009ffffffff000000a60707f8e0000001000000"]}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000080)="9b70e8f1f03a3109922b9038fb8ee51ac928763679f6f8ec0bf9479a20402bcdf47096ffe5e7ebd0f7b7acefaa2e4bcd5d2c847effc018de8643f61b00b2ecf3a72fbd4e823c4cbc0f935e68e662e2e7782737b947e0ad69670d348e495c71", &(0x7f0000000100)=@tcp=r1, 0x2}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:20 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8906, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) r2 = gettid() r3 = gettid() syz_open_procfs$namespace(r3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_NEWNSID={0x3c, 0x58, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@RTM_NEWNSID={0x3c, 0x58, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NETNSA_FD={0x8, 0x3, r1}, @NETNSA_PID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_PID={0x8, 0x2, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x40) 00:22:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x80000, 0x6) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x7, 0x6, {{0x32, 0x4, 0x1, 0x12, 0xc8, 0x64, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @broadcast, {[@generic={0x82, 0xe, "01c8b03e07df83a6c285aaba"}, @timestamp_addr={0x44, 0x1c, 0x41, 0x1, 0x6, [{@rand_addr=0x64010100, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010102, 0x4}]}, @lsrr={0x83, 0xf, 0xd, [@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @cipso={0x86, 0x52, 0x1, [{0x1, 0x7, "1d1e1d9c37"}, {0x1, 0xd, "a6d36f22978dceb79586f7"}, {0x2, 0xc, "722943ac5a87961cda7e"}, {0x0, 0xc, "3d64721414e31f4bf440"}, {0x0, 0x10, "2683d3822b04f575477a2e725bc9"}, {0x5, 0x10, "c6c6f0e37fff6146013d61f12d1d"}]}, @timestamp_addr={0x44, 0x14, 0xb3, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x400}, {@remote, 0x7}]}, @timestamp_prespec={0x44, 0x14, 0xc7, 0x3, 0x7, [{@rand_addr=0x64010101, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3f}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r2, 0x0, 0x700, 0x1, 0xffffffff, {{0x20, 0x4, 0x3, 0x21, 0x80, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @remote, {[@end, @cipso={0x86, 0x24, 0x3, [{0x2, 0x10, "917bd593753c07e16686eb7304df"}, {0x6, 0xe, "6fcee78f6456d4e53aebbe01"}]}, @ssrr={0x89, 0x7, 0xef, [@private=0xa010101]}, @lsrr={0x83, 0x1f, 0x1d, [@empty, @local, @empty, @broadcast, @remote, @multicast1, @remote]}, @timestamp_addr={0x44, 0x14, 0x55, 0x1, 0x0, [{@multicast2, 0x6}, {@loopback, 0x4}]}, @ssrr={0x89, 0xb, 0xfe, [@multicast1, @remote]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x5, 0x1, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, r1, r2, 0x0], 0x5, 0x1800}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@local, @remote, 0x7, 0x1c}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="64010100000000008000000000000000ac141400000000000000000000000000ffffffff000000000000000000000000ac473447f012903bdfb635ad180c1414aa0000000000000000005d5c8a000000000000000000000000007f002f689103c9d0885d11000000000000000000ac1414000000000000000000d16f78907cec98932f25edb6ed802f610690f5e881e5fe2a4298ee202aec5d2e6dd3b4f4c5ac57407b0f4d425bbf66b4be0111c2f330f1ec05b280f1f22cf6156328a5de9b3dde664c7a527f04643a2b1d01f780"]}) (async) socket$inet6(0xa, 0x5, 0x1) (async) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x1, 0x2}, 0x10) 00:22:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x4000000}, 0x0) 00:22:20 executing program 1: socketpair(0x1d, 0x5, 0x1, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:20 executing program 0: sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000}, 0x8000) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x46340, 0x0) write$tcp_congestion(r1, &(0x7f0000000040)='nv\x00', 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="6700000000007a4735019a50834a99b780fe2d593b064a0073e018b39a1f671921cc249033c27c9473ef501838bab59dc0c2971605738b6bf5e2a300003a8b64a3217fbf62f38c849b30ff69bbcf12c40148fb42693251188a6dd042d754caa3d2a2c76b50622ea201592f", @ANYRES32=0x0, @ANYBLOB="78e07800000000080000000840b500800066000002299078ac1414bbac1e00018614fffffffc0e051ad9ac02099fc2a8d24e840f071f10e0000002e00000027f000001ac1414bbac1414bbac1414aa0a010100830bd300000000ac1e01014424dd03e0000002000000060a010101000000200a01010100000009ffffffff000000a60707f8e0000001000000"]}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000080)="9b70e8f1f03a3109922b9038fb8ee51ac928763679f6f8ec0bf9479a20402bcdf47096ffe5e7ebd0f7b7acefaa2e4bcd5d2c847effc018de8643f61b00b2ecf3a72fbd4e823c4cbc0f935e68e662e2e7782737b947e0ad69670d348e495c71", &(0x7f0000000100)=@tcp=r1, 0x2}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x5, 0x1, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, r1, r2, 0x0], 0x5, 0x1800}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 1: socketpair(0x1d, 0x5, 0x1, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x5000000}, 0x0) 00:22:20 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x5, 0x1, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, r1, r2, 0x0], 0x5, 0x1800}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], 0x5, 0x1, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0, r1, r2, 0x0], 0x5, 0x1800}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000001c0)={r2, r3, 0x7f, 0xb8, &(0x7f0000000040)="49feac6e12ae29efb4377d0e51c25f36496f5649ae6581fb64e2f5908ac781efeb2500f238793873b9ca2968c8c01e3c8f286841325848e0c36d83feda3a41763abb5482b0c176c2a5df894dbbc9d9fd2994acd4bd918c05cb013ad7346343cd56f91ebf2ea05c79a94902d5bcec882c7dc9ade79cb876e4aa3eb8d1f3ff606aef5caf839b98732b9e1ba27f6821d830815d86e6983cc853112ed0f35be88d2db40dbcc0b9f128661063ff4dc74da628eae9ad2cf51a0764", 0x40, 0x7, 0x100, 0x5, 0xe665, 0x2, 0x100, 'syz1\x00'}) 00:22:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x6000000}, 0x0) 00:22:20 executing program 1: socketpair(0x1d, 0x5, 0x1, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) socketpair(0x1d, 0x5, 0x1, &(0x7f0000000040)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) 00:22:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000001c0)={r2, r3, 0x7f, 0xb8, &(0x7f0000000040)="49feac6e12ae29efb4377d0e51c25f36496f5649ae6581fb64e2f5908ac781efeb2500f238793873b9ca2968c8c01e3c8f286841325848e0c36d83feda3a41763abb5482b0c176c2a5df894dbbc9d9fd2994acd4bd918c05cb013ad7346343cd56f91ebf2ea05c79a94902d5bcec882c7dc9ade79cb876e4aa3eb8d1f3ff606aef5caf839b98732b9e1ba27f6821d830815d86e6983cc853112ed0f35be88d2db40dbcc0b9f128661063ff4dc74da628eae9ad2cf51a0764", 0x40, 0x7, 0x100, 0x5, 0xe665, 0x2, 0x100, 'syz1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000001c0)={r2, r3, 0x7f, 0xb8, &(0x7f0000000040)="49feac6e12ae29efb4377d0e51c25f36496f5649ae6581fb64e2f5908ac781efeb2500f238793873b9ca2968c8c01e3c8f286841325848e0c36d83feda3a41763abb5482b0c176c2a5df894dbbc9d9fd2994acd4bd918c05cb013ad7346343cd56f91ebf2ea05c79a94902d5bcec882c7dc9ade79cb876e4aa3eb8d1f3ff606aef5caf839b98732b9e1ba27f6821d830815d86e6983cc853112ed0f35be88d2db40dbcc0b9f128661063ff4dc74da628eae9ad2cf51a0764", 0x40, 0x7, 0x100, 0x5, 0xe665, 0x2, 0x100, 'syz1\x00'}) (async) 00:22:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@local, @remote, 0x7, 0x1c}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="64010100000000008000000000000000ac141400000000000000000000000000ffffffff000000000000000000000000ac473447f012903bdfb635ad180c1414aa0000000000000000005d5c8a000000000000000000000000007f002f689103c9d0885d11000000000000000000ac1414000000000000000000d16f78907cec98932f25edb6ed802f610690f5e881e5fe2a4298ee202aec5d2e6dd3b4f4c5ac57407b0f4d425bbf66b4be0111c2f330f1ec05b280f1f22cf6156328a5de9b3dde664c7a527f04643a2b1d01f780"]}) socket$inet6(0xa, 0x5, 0x1) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x1, 0x2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@local, @remote, 0x7, 0x1c}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="64010100000000008000000000000000ac141400000000000000000000000000ffffffff000000000000000000000000ac473447f012903bdfb635ad180c1414aa0000000000000000005d5c8a000000000000000000000000007f002f689103c9d0885d11000000000000000000ac1414000000000000000000d16f78907cec98932f25edb6ed802f610690f5e881e5fe2a4298ee202aec5d2e6dd3b4f4c5ac57407b0f4d425bbf66b4be0111c2f330f1ec05b280f1f22cf6156328a5de9b3dde664c7a527f04643a2b1d01f780"]}) (async) socket$inet6(0xa, 0x5, 0x1) (async) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x1, 0x2}, 0x10) (async) 00:22:20 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x26, 0x1, 0x3ba8ff3f, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x1a, 0x20, 0xffffffffffffffff, @link_fd=r0, r1}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x7000000}, 0x0) 00:22:20 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast1, @loopback, 0x11, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, r1, 0x0, 0x7, 0x80000000, 0x3f, 0x3, 0xffffffc0, 0x20, 0x3f, 0x0, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8906, 0x0) 00:22:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x9000000}, 0x0) 00:22:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 32) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f00000001c0)={r2, r3, 0x7f, 0xb8, &(0x7f0000000040)="49feac6e12ae29efb4377d0e51c25f36496f5649ae6581fb64e2f5908ac781efeb2500f238793873b9ca2968c8c01e3c8f286841325848e0c36d83feda3a41763abb5482b0c176c2a5df894dbbc9d9fd2994acd4bd918c05cb013ad7346343cd56f91ebf2ea05c79a94902d5bcec882c7dc9ade79cb876e4aa3eb8d1f3ff606aef5caf839b98732b9e1ba27f6821d830815d86e6983cc853112ed0f35be88d2db40dbcc0b9f128661063ff4dc74da628eae9ad2cf51a0764", 0x40, 0x7, 0x100, 0x5, 0xe665, 0x2, 0x100, 'syz1\x00'}) (rerun: 32) 00:22:20 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast1, @loopback, 0x11, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x26, 0x1, 0x3ba8ff3f, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x1a, 0x20, 0xffffffffffffffff, @link_fd=r0, r1}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x26, 0x1, 0x3ba8ff3f, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x1a, 0x20, 0xffffffffffffffff, @link_fd=r0, r1}, 0x20) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:22:20 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, r1, 0x0, 0x7, 0x80000000, 0x3f, 0x3, 0xffffffc0, 0x20, 0x3f, 0x0, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 64) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000000)) (rerun: 64) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8906, 0x0) 00:22:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'sit0\x00', 0x0}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x81) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:20 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast1, @loopback, 0x11, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast1, @loopback, 0x11, 0x1}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x1}, 0xa) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x780, 0x7800, 0x9, 0x5, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x65, 0x0, 0xff, 0x2f, 0x0, @remote, @multicast2, {[@noop]}}}}}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@delnexthop={0x20, 0x69, 0x800, 0x70bd29, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x48000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x26, 0x1, 0x3ba8ff3f, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x1a, 0x20, 0xffffffffffffffff, @link_fd=r0, r1}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x26, 0x1, 0x3ba8ff3f, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x1a, 0x20, 0xffffffffffffffff, @link_fd=r0, r1}, 0x20) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) getsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:22:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x40000000}, 0x0) 00:22:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'sit0\x00', 0x0}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x81) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@dellinkprop={0x48, 0x6d, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x280, 0x14001}, [@IFLA_GROUP={0x8, 0x1b, 0xfff}, @IFLA_LINKMODE={0x5, 0x11, 0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x20}, @IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40001) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa9}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40180}, 0x4880) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, r1, 0x0, 0x7, 0x80000000, 0x3f, 0x3, 0xffffffc0, 0x20, 0x3f, 0x0, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8906, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={0x0, r1, 0x0, 0x7, 0x80000000, 0x3f, 0x3, 0xffffffc0, 0x20, 0x3f, 0x0, 0x9}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000000)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8906, 0x0) (async) 00:22:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x1}, 0xa) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x780, 0x7800, 0x9, 0x5, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x65, 0x0, 0xff, 0x2f, 0x0, @remote, @multicast2, {[@noop]}}}}}) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@delnexthop={0x20, 0x69, 0x800, 0x70bd29, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x48000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@dellinkprop={0x48, 0x6d, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x280, 0x14001}, [@IFLA_GROUP={0x8, 0x1b, 0xfff}, @IFLA_LINKMODE={0x5, 0x11, 0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x20}, @IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40001) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa9}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40180}, 0x4880) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'sit0\x00', 0x0}) r1 = fsmount(0xffffffffffffffff, 0x1, 0x81) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x92270000}, 0x0) 00:22:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x6, 0x9, {{0x29, 0x4, 0x1, 0xd, 0xa4, 0x64, 0x0, 0xc1, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0x8, "5569d0916e8f"}, @end, @generic={0x89, 0xb, "605e50b55bbeec50a4"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xce, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@broadcast, 0xfff}, {@remote, 0xa86}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x9}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff0}, {@remote, 0x6}, {@broadcast, 0x80000001}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x29, [@local, @broadcast]}, @timestamp={0x44, 0x10, 0xb2, 0x0, 0x3, [0x8, 0x40, 0x120]}, @ra={0x94, 0x4, 0x1}]}}}}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x80, 0x8, 0x0, 0x40, {{0x17, 0x4, 0x2, 0x5, 0x5c, 0x64, 0x0, 0x38, 0x29, 0x0, @local, @empty, {[@noop, @timestamp_prespec={0x44, 0xc, 0xf0, 0x3, 0x9, [{@broadcast, 0xe1}]}, @lsrr={0x83, 0xb, 0xcb, [@multicast1, @multicast1]}, @ssrr={0x89, 0x2b, 0x3f, [@private=0xa010102, @remote, @broadcast, @remote, @multicast1, @rand_addr=0x64010101, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}, @empty]}, @generic={0x82, 0x5, "3ac775"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (rerun: 32) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x1}, 0xa) (async, rerun: 32) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x780, 0x7800, 0x9, 0x5, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x65, 0x0, 0xff, 0x2f, 0x0, @remote, @multicast2, {[@noop]}}}}}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@delnexthop={0x20, 0x69, 0x800, 0x70bd29, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0x48000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x6, 0x9, {{0x29, 0x4, 0x1, 0xd, 0xa4, 0x64, 0x0, 0xc1, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0x8, "5569d0916e8f"}, @end, @generic={0x89, 0xb, "605e50b55bbeec50a4"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xce, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@broadcast, 0xfff}, {@remote, 0xa86}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x9}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff0}, {@remote, 0x6}, {@broadcast, 0x80000001}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x29, [@local, @broadcast]}, @timestamp={0x44, 0x10, 0xb2, 0x0, 0x3, [0x8, 0x40, 0x120]}, @ra={0x94, 0x4, 0x1}]}}}}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x80, 0x8, 0x0, 0x40, {{0x17, 0x4, 0x2, 0x5, 0x5c, 0x64, 0x0, 0x38, 0x29, 0x0, @local, @empty, {[@noop, @timestamp_prespec={0x44, 0xc, 0xf0, 0x3, 0x9, [{@broadcast, 0xe1}]}, @lsrr={0x83, 0xb, 0xcb, [@multicast1, @multicast1]}, @ssrr={0x89, 0x2b, 0x3f, [@private=0xa010102, @remote, @broadcast, @remote, @multicast1, @rand_addr=0x64010101, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}, @empty]}, @generic={0x82, 0x5, "3ac775"}]}}}}}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (rerun: 32) 00:22:20 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@dellinkprop={0x48, 0x6d, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x280, 0x14001}, [@IFLA_GROUP={0x8, 0x1b, 0xfff}, @IFLA_LINKMODE={0x5, 0x11, 0x8}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x20}, @IFLA_GROUP={0x8, 0x1b, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40001) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa9}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x64}, 0x1, 0x0, 0x0, 0x40180}, 0x4880) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff}, 0x0) 00:22:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffff000000005bfeffff000000ce5112086d6a5a1110b025668700"]}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = fsmount(r2, 0x1, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x2f, 0x10, 0x2, 0x4, {{0xa, 0x4, 0x1, 0x2d, 0x28, 0x65, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x13, 0x13, [@dev={0xac, 0x14, 0x14, 0x40}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r5, 0x10, 0x700, 0x0, 0xfffffffe, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x65, 0x0, 0x7, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x20}, {[@timestamp_addr={0x44, 0x14, 0xad, 0x1, 0x2, [{@remote, 0x4508}, {@remote, 0x8}]}, @timestamp_prespec={0x44, 0x54, 0x14, 0x3, 0x5, [{@loopback, 0x4f1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xffff}, {@private=0xa010100, 0xe}, {@rand_addr=0x64010101, 0x2}, {@broadcast, 0x8001}, {@local, 0x7}, {@empty, 0x7fff}, {@remote, 0x100}, {@local, 0x4}, {@private=0xa010101, 0x76fd}]}]}}}}}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0xfffff000}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfe}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'sit0\x00', r5, 0x80, 0x0, 0x2, 0xfff, {{0x15, 0x4, 0x1, 0x28, 0x54, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x24, 0x1, [{0x5, 0x12, "3c5ac2f71135c0fd7df8820f72b2ecdc"}, {0x6, 0x8, "24a7ad05c33b"}, {0x0, 0x4, "8ddf"}]}, @lsrr={0x83, 0x1b, 0x49, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @private=0xa010101]}, @noop]}}}}}) r6 = socket$inet(0x2, 0x5, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@broadcast, 0x0, 0x0, 0x10, 0x0, [{@private}]}}) 00:22:20 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000040)={'syztnl2\x00', 0x0}) 00:22:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x6) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x4040) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0xffffff7f}, 0x0) 00:22:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x80, 0x6, 0x9, {{0x29, 0x4, 0x1, 0xd, 0xa4, 0x64, 0x0, 0xc1, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0x8, "5569d0916e8f"}, @end, @generic={0x89, 0xb, "605e50b55bbeec50a4"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x54, 0xce, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x16}, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x40}, {@broadcast, 0xfff}, {@remote, 0xa86}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x9}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff0}, {@remote, 0x6}, {@broadcast, 0x80000001}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x29, [@local, @broadcast]}, @timestamp={0x44, 0x10, 0xb2, 0x0, 0x3, [0x8, 0x40, 0x120]}, @ra={0x94, 0x4, 0x1}]}}}}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x80, 0x8, 0x0, 0x40, {{0x17, 0x4, 0x2, 0x5, 0x5c, 0x64, 0x0, 0x38, 0x29, 0x0, @local, @empty, {[@noop, @timestamp_prespec={0x44, 0xc, 0xf0, 0x3, 0x9, [{@broadcast, 0xe1}]}, @lsrr={0x83, 0xb, 0xcb, [@multicast1, @multicast1]}, @ssrr={0x89, 0x2b, 0x3f, [@private=0xa010102, @remote, @broadcast, @remote, @multicast1, @rand_addr=0x64010101, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}, @empty]}, @generic={0x82, 0x5, "3ac775"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:21 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000040)={'syztnl2\x00', 0x0}) 00:22:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x89) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf250300000008112f000a010102060001000b00000008000a0000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4044004) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0xfffffff0}, 0x0) 00:22:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffff000000005bfeffff000000ce5112086d6a5a1110b025668700"]}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = fsmount(r2, 0x1, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x2f, 0x10, 0x2, 0x4, {{0xa, 0x4, 0x1, 0x2d, 0x28, 0x65, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x13, 0x13, [@dev={0xac, 0x14, 0x14, 0x40}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r5, 0x10, 0x700, 0x0, 0xfffffffe, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x65, 0x0, 0x7, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x20}, {[@timestamp_addr={0x44, 0x14, 0xad, 0x1, 0x2, [{@remote, 0x4508}, {@remote, 0x8}]}, @timestamp_prespec={0x44, 0x54, 0x14, 0x3, 0x5, [{@loopback, 0x4f1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xffff}, {@private=0xa010100, 0xe}, {@rand_addr=0x64010101, 0x2}, {@broadcast, 0x8001}, {@local, 0x7}, {@empty, 0x7fff}, {@remote, 0x100}, {@local, 0x4}, {@private=0xa010101, 0x76fd}]}]}}}}}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0xfffff000}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfe}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'sit0\x00', r5, 0x80, 0x0, 0x2, 0xfff, {{0x15, 0x4, 0x1, 0x28, 0x54, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x24, 0x1, [{0x5, 0x12, "3c5ac2f71135c0fd7df8820f72b2ecdc"}, {0x6, 0x8, "24a7ad05c33b"}, {0x0, 0x4, "8ddf"}]}, @lsrr={0x83, 0x1b, 0x49, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @private=0xa010101]}, @noop]}}}}}) r6 = socket$inet(0x2, 0x5, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@broadcast, 0x0, 0x0, 0x10, 0x0, [{@private}]}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffff000000005bfeffff000000ce5112086d6a5a1110b025668700"]}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) fsmount(r2, 0x1, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x2f, 0x10, 0x2, 0x4, {{0xa, 0x4, 0x1, 0x2d, 0x28, 0x65, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x13, 0x13, [@dev={0xac, 0x14, 0x14, 0x40}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r5, 0x10, 0x700, 0x0, 0xfffffffe, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x65, 0x0, 0x7, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x20}, {[@timestamp_addr={0x44, 0x14, 0xad, 0x1, 0x2, [{@remote, 0x4508}, {@remote, 0x8}]}, @timestamp_prespec={0x44, 0x54, 0x14, 0x3, 0x5, [{@loopback, 0x4f1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xffff}, {@private=0xa010100, 0xe}, {@rand_addr=0x64010101, 0x2}, {@broadcast, 0x8001}, {@local, 0x7}, {@empty, 0x7fff}, {@remote, 0x100}, {@local, 0x4}, {@private=0xa010101, 0x76fd}]}]}}}}}) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0xfffff000}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfe}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'sit0\x00', r5, 0x80, 0x0, 0x2, 0xfff, {{0x15, 0x4, 0x1, 0x28, 0x54, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x24, 0x1, [{0x5, 0x12, "3c5ac2f71135c0fd7df8820f72b2ecdc"}, {0x6, 0x8, "24a7ad05c33b"}, {0x0, 0x4, "8ddf"}]}, @lsrr={0x83, 0x1b, 0x49, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @private=0xa010101]}, @noop]}}}}}) (async) socket$inet(0x2, 0x5, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@broadcast, 0x0, 0x0, 0x10, 0x0, [{@private}]}}) (async) 00:22:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0x6) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x4040) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:21 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000040)={'syztnl2\x00', 0x0}) 00:22:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x40, 0x401, 0xb4, {{0x6, 0x4, 0x3, 0x39, 0x18, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @empty, {[@noop]}}}}}) socketpair(0x1d, 0xa, 0x8ec, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x20, 0x80, 0x7fffffff, 0x0, {{0x1a, 0x4, 0x3, 0x5, 0x68, 0x68, 0x0, 0x40, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xf4, 0x3, 0x0, [{@rand_addr=0x64010102, 0x22}, {@empty, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0xbf, 0x3, 0x1, [{@rand_addr=0x64010100, 0x3}, {@remote, 0xff}, {@broadcast, 0xffff}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x18, 0xdb, 0x0, 0x4, [0x4, 0x6, 0x400, 0xe70, 0x5]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@remote, @broadcast, 0x5, 0xf}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x20, 0x8000, 0x5, 0x7f, {{0x28, 0x4, 0x1, 0x9, 0xa0, 0x64, 0x0, 0x6, 0x29, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x14, 0xcf, 0x1, 0x2, [{@loopback, 0x4}, {@private=0xa010101, 0xffffffff}]}, @timestamp_prespec={0x44, 0xc, 0x4, 0x3, 0x3, [{@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x2c, 0xba, 0x3, 0x5, [{@loopback, 0x7}, {@multicast1, 0xfffffffe}, {@private=0xa010102, 0x5f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14c}, {@broadcast, 0x101}]}, @timestamp_addr={0x44, 0xc, 0x50, 0x1, 0x8, [{@loopback, 0x7fff}]}, @end, @timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x4, [{@multicast2}, {@multicast2, 0x5}]}, @timestamp={0x44, 0x1c, 0x22, 0x0, 0x0, [0x7, 0x100, 0x4, 0x5988, 0xa8a1, 0x3]}]}}}}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r2, 0x0, 0xf2) 00:22:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x89) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf250300000008112f000a010102060001000b00000008000a0000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4044004) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x40, 0x401, 0xb4, {{0x6, 0x4, 0x3, 0x39, 0x18, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @empty, {[@noop]}}}}}) socketpair(0x1d, 0xa, 0x8ec, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x20, 0x80, 0x7fffffff, 0x0, {{0x1a, 0x4, 0x3, 0x5, 0x68, 0x68, 0x0, 0x40, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xf4, 0x3, 0x0, [{@rand_addr=0x64010102, 0x22}, {@empty, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0xbf, 0x3, 0x1, [{@rand_addr=0x64010100, 0x3}, {@remote, 0xff}, {@broadcast, 0xffff}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x18, 0xdb, 0x0, 0x4, [0x4, 0x6, 0x400, 0xe70, 0x5]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@remote, @broadcast, 0x5, 0xf}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x20, 0x8000, 0x5, 0x7f, {{0x28, 0x4, 0x1, 0x9, 0xa0, 0x64, 0x0, 0x6, 0x29, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x14, 0xcf, 0x1, 0x2, [{@loopback, 0x4}, {@private=0xa010101, 0xffffffff}]}, @timestamp_prespec={0x44, 0xc, 0x4, 0x3, 0x3, [{@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x2c, 0xba, 0x3, 0x5, [{@loopback, 0x7}, {@multicast1, 0xfffffffe}, {@private=0xa010102, 0x5f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14c}, {@broadcast, 0x101}]}, @timestamp_addr={0x44, 0xc, 0x50, 0x1, 0x8, [{@loopback, 0x7fff}]}, @end, @timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x4, [{@multicast2}, {@multicast2, 0x5}]}, @timestamp={0x44, 0x1c, 0x22, 0x0, 0x0, [0x7, 0x100, 0x4, 0x5988, 0xa8a1, 0x3]}]}}}}}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) fsmount(r2, 0x0, 0xf2) 00:22:21 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 00:22:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x40030000000000}, 0x0) 00:22:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x6) (async) r1 = fsmount(0xffffffffffffffff, 0x1, 0x6) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0xc800}, 0x4040) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffff000000005bfeffff000000ce5112086d6a5a1110b025668700"]}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = fsmount(r2, 0x1, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x2f, 0x10, 0x2, 0x4, {{0xa, 0x4, 0x1, 0x2d, 0x28, 0x65, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x13, 0x13, [@dev={0xac, 0x14, 0x14, 0x40}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r5, 0x10, 0x700, 0x0, 0xfffffffe, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x65, 0x0, 0x7, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x20}, {[@timestamp_addr={0x44, 0x14, 0xad, 0x1, 0x2, [{@remote, 0x4508}, {@remote, 0x8}]}, @timestamp_prespec={0x44, 0x54, 0x14, 0x3, 0x5, [{@loopback, 0x4f1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xffff}, {@private=0xa010100, 0xe}, {@rand_addr=0x64010101, 0x2}, {@broadcast, 0x8001}, {@local, 0x7}, {@empty, 0x7fff}, {@remote, 0x100}, {@local, 0x4}, {@private=0xa010101, 0x76fd}]}]}}}}}) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0xfffff000}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfe}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'sit0\x00', r5, 0x80, 0x0, 0x2, 0xfff, {{0x15, 0x4, 0x1, 0x28, 0x54, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x24, 0x1, [{0x5, 0x12, "3c5ac2f71135c0fd7df8820f72b2ecdc"}, {0x6, 0x8, "24a7ad05c33b"}, {0x0, 0x4, "8ddf"}]}, @lsrr={0x83, 0x1b, 0x49, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @private=0xa010101]}, @noop]}}}}}) r6 = socket$inet(0x2, 0x5, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@broadcast, 0x0, 0x0, 0x10, 0x0, [{@private}]}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffff000000005bfeffff000000ce5112086d6a5a1110b025668700"]}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) fsmount(r2, 0x1, 0x2) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x2f, 0x10, 0x2, 0x4, {{0xa, 0x4, 0x1, 0x2d, 0x28, 0x65, 0x0, 0x3, 0x2f, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x13, 0x13, [@dev={0xac, 0x14, 0x14, 0x40}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}]}, @noop]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', r5, 0x10, 0x700, 0x0, 0xfffffffe, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x65, 0x0, 0x7, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x20}, {[@timestamp_addr={0x44, 0x14, 0xad, 0x1, 0x2, [{@remote, 0x4508}, {@remote, 0x8}]}, @timestamp_prespec={0x44, 0x54, 0x14, 0x3, 0x5, [{@loopback, 0x4f1}, {@dev={0xac, 0x14, 0x14, 0x29}, 0xffff}, {@private=0xa010100, 0xe}, {@rand_addr=0x64010101, 0x2}, {@broadcast, 0x8001}, {@local, 0x7}, {@empty, 0x7fff}, {@remote, 0x100}, {@local, 0x4}, {@private=0xa010101, 0x76fd}]}]}}}}}) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0xfffff000}) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfe}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'sit0\x00', r5, 0x80, 0x0, 0x2, 0xfff, {{0x15, 0x4, 0x1, 0x28, 0x54, 0x64, 0x0, 0x8, 0x29, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x24, 0x1, [{0x5, 0x12, "3c5ac2f71135c0fd7df8820f72b2ecdc"}, {0x6, 0x8, "24a7ad05c33b"}, {0x0, 0x4, "8ddf"}]}, @lsrr={0x83, 0x1b, 0x49, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @empty, @private=0xa010101]}, @noop]}}}}}) (async) socket$inet(0x2, 0x5, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r6, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@broadcast, 0x0, 0x0, 0x10, 0x0, [{@private}]}}) (async) 00:22:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x89) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf250300000008112f000a010102060001000b00000008000a0000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4044004) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) fsmount(0xffffffffffffffff, 0x0, 0x89) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf250300000008112f000a010102060001000b00000008000a0000000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4044004) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'syztnl2\x00', 0x0}) (async) 00:22:21 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 00:22:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x40, 0x401, 0xb4, {{0x6, 0x4, 0x3, 0x39, 0x18, 0x64, 0x0, 0x4, 0x29, 0x0, @multicast2, @empty, {[@noop]}}}}}) (async) socketpair(0x1d, 0xa, 0x8ec, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x20, 0x80, 0x7fffffff, 0x0, {{0x1a, 0x4, 0x3, 0x5, 0x68, 0x68, 0x0, 0x40, 0x4, 0x0, @private=0xa010101, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0xf4, 0x3, 0x0, [{@rand_addr=0x64010102, 0x22}, {@empty, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0xbf, 0x3, 0x1, [{@rand_addr=0x64010100, 0x3}, {@remote, 0xff}, {@broadcast, 0xffff}]}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp={0x44, 0x18, 0xdb, 0x0, 0x4, [0x4, 0x6, 0x400, 0xe70, 0x5]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000200)={@remote, @broadcast, 0x5, 0xf}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x20, 0x8000, 0x5, 0x7f, {{0x28, 0x4, 0x1, 0x9, 0xa0, 0x64, 0x0, 0x6, 0x29, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x14, 0xcf, 0x1, 0x2, [{@loopback, 0x4}, {@private=0xa010101, 0xffffffff}]}, @timestamp_prespec={0x44, 0xc, 0x4, 0x3, 0x3, [{@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x2c, 0xba, 0x3, 0x5, [{@loopback, 0x7}, {@multicast1, 0xfffffffe}, {@private=0xa010102, 0x5f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14c}, {@broadcast, 0x101}]}, @timestamp_addr={0x44, 0xc, 0x50, 0x1, 0x8, [{@loopback, 0x7fff}]}, @end, @timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x4, [{@multicast2}, {@multicast2, 0x5}]}, @timestamp={0x44, 0x1c, 0x22, 0x0, 0x0, [0x7, 0x100, 0x4, 0x5988, 0xa8a1, 0x3]}]}}}}}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) fsmount(r2, 0x0, 0xf2) 00:22:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x100000000000000}, 0x0) 00:22:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@empty, 0x0, 0x0, 0x50, 0x0, [{@broadcast}, {@multicast2}, {@multicast2}, {@dev}, {@remote}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:21 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 00:22:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x1, 0x0, 0x10, 0x0, [{@private}]}}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000000c0)={0x1, r1, 0x80000}) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@setlink={0x6c, 0x13, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x42002, 0x8410}, [@IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3f}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "36311361e25099d772dcf5bc0e03b63e"}]}, @IFLA_MAP={0x24, 0xe, {0x7, 0xec, 0x1b0, 0x6, 0x1, 0x49}}, @IFLA_EXT_MASK={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080)=0x40, 0x4) 00:22:21 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x9) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x3f, 0xffffffffffffffff, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x36d8, 0x82, 0x8, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x2}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x9, 0x9, {{0x24, 0x4, 0x0, 0x15, 0x90, 0x64, 0x0, 0x3, 0x0, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1d}, {[@cipso={0x86, 0x12, 0x0, [{0x7, 0x2}, {0x5, 0xa, "0102185247f225dd"}]}, @ssrr={0x89, 0x7, 0xc6, [@empty]}, @lsrr={0x83, 0x13, 0xa1, [@multicast1, @remote, @broadcast, @loopback]}, @timestamp={0x44, 0x2c, 0x44, 0x0, 0xd, [0x7fff, 0x200, 0x1ff, 0x4, 0x2, 0xa38, 0x80, 0x7ff, 0x7, 0x277]}, @timestamp={0x44, 0x18, 0x5d, 0x0, 0xb, [0x81, 0x56b, 0x7, 0x5, 0xc9ad]}, @timestamp_prespec={0x44, 0xc, 0xb1, 0x3, 0x5, [{@remote, 0xfffff800}]}]}}}}}) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f00000008c0)) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000540), 0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0x81, 0x3f, 0x2389, r3, 0x4, '\x00', 0x0, r1, 0x3, 0x1, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6220, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x80000001, 0xf2, &(0x7f00000001c0)=""/242, 0x40f00, 0x46, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[r0, r1, 0xffffffffffffffff, r4, 0x1, 0xffffffffffffffff, 0x1, 0x1, r3, 0x1], &(0x7f0000000440)=[{0x2, 0x2, 0x6, 0xb}, {0x3, 0x1, 0xe, 0x1}, {0x3, 0x2, 0x2, 0xa}], 0x10, 0x80}, 0x90) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4008024) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x80, 0x10, 0x2e, 0x0, {{0xc, 0x4, 0x1, 0x34, 0x30, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, {[@ssrr={0x89, 0x3, 0x9}, @lsrr={0x83, 0x17, 0xe1, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x26}, @empty, @multicast2]}]}}}}}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000001dc0)={0x0}) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc0585609, &(0x7f0000000840)={0x6, 0x3, 0x4, 0x2000, 0x8, {r7, r8/1000+10000}, {0x3, 0x1, 0xea, 0x4, 0x5, 0x1, "34e10094"}, 0x0, 0x4, {}, 0x1, 0x0, r0}) 00:22:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@empty, 0x0, 0x0, 0x50, 0x0, [{@broadcast}, {@multicast2}, {@multicast2}, {@dev}, {@remote}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@empty, 0x0, 0x0, 0x50, 0x0, [{@broadcast}, {@multicast2}, {@multicast2}, {@dev}, {@remote}]}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x200000000000000}, 0x0) 00:22:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=0x64010102, 0x0, 0x0, 0x10, 0x0, [{@multicast2}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) rt_sigqueueinfo(r1, 0x35, &(0x7f0000000000)={0x26, 0x8, 0xffffffff}) 00:22:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x1, 0x0, 0x10, 0x0, [{@private}]}}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000000c0)={0x1, r1, 0x80000}) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@setlink={0x6c, 0x13, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x42002, 0x8410}, [@IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3f}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "36311361e25099d772dcf5bc0e03b63e"}]}, @IFLA_MAP={0x24, 0xe, {0x7, 0xec, 0x1b0, 0x6, 0x1, 0x49}}, @IFLA_EXT_MASK={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080)=0x40, 0x4) 00:22:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@broadcast, 0x1, 0x0, 0x10, 0x0, [{@private}]}}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000000c0)={0x1, r1, 0x80000}) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@setlink={0x6c, 0x13, 0x10, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x42002, 0x8410}, [@IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3f}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "36311361e25099d772dcf5bc0e03b63e"}]}, @IFLA_MAP={0x24, 0xe, {0x7, 0xec, 0x1b0, 0x6, 0x1, 0x49}}, @IFLA_EXT_MASK={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080)=0x40, 0x4) 00:22:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) rt_sigqueueinfo(r1, 0x35, &(0x7f0000000000)={0x26, 0x8, 0xffffffff}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) gettid() (async) syz_open_procfs$namespace(r1, 0x0) (async) rt_sigqueueinfo(r1, 0x35, &(0x7f0000000000)={0x26, 0x8, 0xffffffff}) (async) 00:22:21 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x9) (async, rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x3f, 0xffffffffffffffff, 0x1}) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x36d8, 0x82, 0x8, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x2}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x9, 0x9, {{0x24, 0x4, 0x0, 0x15, 0x90, 0x64, 0x0, 0x3, 0x0, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1d}, {[@cipso={0x86, 0x12, 0x0, [{0x7, 0x2}, {0x5, 0xa, "0102185247f225dd"}]}, @ssrr={0x89, 0x7, 0xc6, [@empty]}, @lsrr={0x83, 0x13, 0xa1, [@multicast1, @remote, @broadcast, @loopback]}, @timestamp={0x44, 0x2c, 0x44, 0x0, 0xd, [0x7fff, 0x200, 0x1ff, 0x4, 0x2, 0xa38, 0x80, 0x7ff, 0x7, 0x277]}, @timestamp={0x44, 0x18, 0x5d, 0x0, 0xb, [0x81, 0x56b, 0x7, 0x5, 0xc9ad]}, @timestamp_prespec={0x44, 0xc, 0xb1, 0x3, 0x5, [{@remote, 0xfffff800}]}]}}}}}) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f00000008c0)) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000540), 0x80000) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0x81, 0x3f, 0x2389, r3, 0x4, '\x00', 0x0, r1, 0x3, 0x1, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6220, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x80000001, 0xf2, &(0x7f00000001c0)=""/242, 0x40f00, 0x46, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[r0, r1, 0xffffffffffffffff, r4, 0x1, 0xffffffffffffffff, 0x1, 0x1, r3, 0x1], &(0x7f0000000440)=[{0x2, 0x2, 0x6, 0xb}, {0x3, 0x1, 0xe, 0x1}, {0x3, 0x2, 0x2, 0xa}], 0x10, 0x80}, 0x90) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4008024) (async, rerun: 32) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x80, 0x10, 0x2e, 0x0, {{0xc, 0x4, 0x1, 0x34, 0x30, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, {[@ssrr={0x89, 0x3, 0x9}, @lsrr={0x83, 0x17, 0xe1, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x26}, @empty, @multicast2]}]}}}}}) (rerun: 64) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc0585609, &(0x7f0000000840)={0x6, 0x3, 0x4, 0x2000, 0x8, {r7, r8/1000+10000}, {0x3, 0x1, 0xea, 0x4, 0x5, 0x1, "34e10094"}, 0x0, 0x4, {}, 0x1, 0x0, r0}) 00:22:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@empty, 0x0, 0x0, 0x50, 0x0, [{@broadcast}, {@multicast2}, {@multicast2}, {@dev}, {@remote}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@empty, 0x0, 0x0, 0x50, 0x0, [{@broadcast}, {@multicast2}, {@multicast2}, {@dev}, {@remote}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=0x64010102, 0x0, 0x0, 0x10, 0x0, [{@multicast2}]}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x300000000000000}, 0x0) 00:22:21 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x9) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000340)={0x3f, 0xffffffffffffffff, 0x1}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x36d8, 0x82, 0x8, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x2}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x9, 0x9, {{0x24, 0x4, 0x0, 0x15, 0x90, 0x64, 0x0, 0x3, 0x0, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1d}, {[@cipso={0x86, 0x12, 0x0, [{0x7, 0x2}, {0x5, 0xa, "0102185247f225dd"}]}, @ssrr={0x89, 0x7, 0xc6, [@empty]}, @lsrr={0x83, 0x13, 0xa1, [@multicast1, @remote, @broadcast, @loopback]}, @timestamp={0x44, 0x2c, 0x44, 0x0, 0xd, [0x7fff, 0x200, 0x1ff, 0x4, 0x2, 0xa38, 0x80, 0x7ff, 0x7, 0x277]}, @timestamp={0x44, 0x18, 0x5d, 0x0, 0xb, [0x81, 0x56b, 0x7, 0x5, 0xc9ad]}, @timestamp_prespec={0x44, 0xc, 0xb1, 0x3, 0x5, [{@remote, 0xfffff800}]}]}}}}}) (async) ioctl$HIDIOCGRAWPHYS(r2, 0x80404805, &(0x7f00000008c0)) (async, rerun: 64) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000540), 0x80000) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x6, 0x81, 0x3f, 0x2389, r3, 0x4, '\x00', 0x0, r1, 0x3, 0x1, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6220, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}]}, &(0x7f0000000000)='syzkaller\x00', 0x80000001, 0xf2, &(0x7f00000001c0)=""/242, 0x40f00, 0x46, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[r0, r1, 0xffffffffffffffff, r4, 0x1, 0xffffffffffffffff, 0x1, 0x1, r3, 0x1], &(0x7f0000000440)=[{0x2, 0x2, 0x6, 0xb}, {0x3, 0x1, 0xe, 0x1}, {0x3, 0x2, 0x2, 0xa}], 0x10, 0x80}, 0x90) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x40, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010102}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4008024) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x80, 0x10, 0x2e, 0x0, {{0xc, 0x4, 0x1, 0x34, 0x30, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, {[@ssrr={0x89, 0x3, 0x9}, @lsrr={0x83, 0x17, 0xe1, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x26}, @empty, @multicast2]}]}}}}}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc0585609, &(0x7f0000000840)={0x6, 0x3, 0x4, 0x2000, 0x8, {r7, r8/1000+10000}, {0x3, 0x1, 0xea, 0x4, 0x5, 0x1, "34e10094"}, 0x0, 0x4, {}, 0x1, 0x0, r0}) 00:22:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@rand_addr=0x64010102, 0x0, 0x0, 0x10, 0x0, [{@multicast2}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x181280, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x0, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7, 0x8, 0x800, 0x200}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'gre0\x00', r2, 0x20, 0x700, 0x4ea, 0x3f, {{0x30, 0x4, 0x1, 0x22, 0xc0, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3c}, {[@noop, @timestamp={0x44, 0x18, 0xb, 0x0, 0x2, [0x4d5830ee, 0x5, 0xffff0001, 0xfff, 0x9]}, @lsrr={0x83, 0x23, 0x48, [@private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @private=0xa010101, @private=0xa010102, @broadcast, @loopback]}, @timestamp_addr={0x44, 0x24, 0xa6, 0x1, 0x5, [{@remote, 0x6}, {@remote, 0x4}, {@loopback, 0x20000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8dd}]}, @lsrr={0x83, 0x2b, 0x5d, [@broadcast, @private=0xa010101, @loopback, @rand_addr=0x64010101, @multicast2, @loopback, @local, @private=0xa010101, @broadcast, @private=0xa010101]}, @generic={0x82, 0x7, "82d437b101"}, @noop, @ssrr={0x89, 0xb, 0x18, [@local, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x71, 0x3, 0x2, [{@local, 0xaf}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x12, 0x1d}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7, 0x7, 0xf1, 0x4, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x65, 0x0, 0x9, 0x29, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x18, 0x8f, 0x0, 0x4, [0x8, 0x0, 0x20, 0xfffffffe, 0xb6b8]}, @generic={0x9b, 0x10, "b925a67fdbc45c4c83d3a754e306"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @private=0xa010100, @loopback]}]}}}}}) 00:22:21 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00f8be2ca98064e48f548883cbdf03e4b1664a481ff62c324720f9e1a4e11af4ef2501278a33c7f32d226d845431c8a38a15f4b5427b71f78cd1f74910a4fe26fd77aa33afc60cf878956738cec14089a1d5fb8d7c410d9f3904b1b85f7ee9f0635512ab0cd4e3282764cff37a"], 0x14}, 0x1, 0x0, 0x0, 0x8c11}, 0x20048844) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:22:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x400000000000000}, 0x0) 00:22:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = gettid() syz_open_procfs$namespace(r1, 0x0) rt_sigqueueinfo(r1, 0x35, &(0x7f0000000000)={0x26, 0x8, 0xffffffff}) 00:22:21 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@any, 0x9}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@empty, 0x0, 0x0, 0x10, 0x0, [{@private}]}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000000)={'erspan0\x00', 0x0}) 00:22:21 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00f8be2ca98064e48f548883cbdf03e4b1664a481ff62c324720f9e1a4e11af4ef2501278a33c7f32d226d845431c8a38a15f4b5427b71f78cd1f74910a4fe26fd77aa33afc60cf878956738cec14089a1d5fb8d7c410d9f3904b1b85f7ee9f0635512ab0cd4e3282764cff37a"], 0x14}, 0x1, 0x0, 0x0, 0x8c11}, 0x20048844) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'sit0\x00', 0x0}) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00f8be2ca98064e48f548883cbdf03e4b1664a481ff62c324720f9e1a4e11af4ef2501278a33c7f32d226d845431c8a38a15f4b5427b71f78cd1f74910a4fe26fd77aa33afc60cf878956738cec14089a1d5fb8d7c410d9f3904b1b85f7ee9f0635512ab0cd4e3282764cff37a"], 0x14}, 0x1, 0x0, 0x0, 0x8c11}, 0x20048844) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'sit0\x00', 0x0}) (async) 00:22:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@private=0x2, 0x0, 0x0, 0x10, 0x0, [{@dev}]}}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x13, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0]}, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x13, 0x1800}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)=']\x00', &(0x7f0000000080)='\x00', 0x0) 00:22:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x500000000000000}, 0x0) 00:22:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={r0, r1, 0x8, 0xc2, &(0x7f0000000080)="15625948c8ae60414d55fb04f2b778b8bd55702f80de95619e1aed85e3da991e4ffcb69b65f47d1660743dd30dd6dc8dd0bba57f4f2e0bd87d49bb3ad94baabb45cf6cc0c4c6c123987a9e41d0b15f2cb3655fe738daaab14767f84db34604ba186d88a11556c6d1a57011968b1fef0ad9b262002563c9344a2a56bb14b56773fe32a54066a111fa809dcfa497a5a35b5613d702c2a4eae92b8ab32fb21fa3e2ffd6aaac103c4bbd350cf7f471319fcb2487ea6a61634282f7b226332b08f28d2491", 0x8, 0x0, 0x81, 0x3, 0x8, 0x3, 0x9, 'syz1\x00'}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x8906, 0x0) 00:22:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@private=0x2, 0x0, 0x0, 0x10, 0x0, [{@dev}]}}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x13, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0]}, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x13, 0x1800}) (async, rerun: 64) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)=']\x00', &(0x7f0000000080)='\x00', 0x0) (rerun: 64) 00:22:21 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@any, 0x9}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@any, 0x9}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@empty, 0x0, 0x0, 0x10, 0x0, [{@private}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@empty, 0x0, 0x0, 0x10, 0x0, [{@private}]}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000000)={'erspan0\x00', 0x0}) 00:22:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={r0, r1, 0x8, 0xc2, &(0x7f0000000080)="15625948c8ae60414d55fb04f2b778b8bd55702f80de95619e1aed85e3da991e4ffcb69b65f47d1660743dd30dd6dc8dd0bba57f4f2e0bd87d49bb3ad94baabb45cf6cc0c4c6c123987a9e41d0b15f2cb3655fe738daaab14767f84db34604ba186d88a11556c6d1a57011968b1fef0ad9b262002563c9344a2a56bb14b56773fe32a54066a111fa809dcfa497a5a35b5613d702c2a4eae92b8ab32fb21fa3e2ffd6aaac103c4bbd350cf7f471319fcb2487ea6a61634282f7b226332b08f28d2491", 0x8, 0x0, 0x81, 0x3, 0x8, 0x3, 0x9, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={r0, r1, 0x8, 0xc2, &(0x7f0000000080)="15625948c8ae60414d55fb04f2b778b8bd55702f80de95619e1aed85e3da991e4ffcb69b65f47d1660743dd30dd6dc8dd0bba57f4f2e0bd87d49bb3ad94baabb45cf6cc0c4c6c123987a9e41d0b15f2cb3655fe738daaab14767f84db34604ba186d88a11556c6d1a57011968b1fef0ad9b262002563c9344a2a56bb14b56773fe32a54066a111fa809dcfa497a5a35b5613d702c2a4eae92b8ab32fb21fa3e2ffd6aaac103c4bbd350cf7f471319fcb2487ea6a61634282f7b226332b08f28d2491", 0x8, 0x0, 0x81, 0x3, 0x8, 0x3, 0x9, 'syz1\x00'}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x8906, 0x0) 00:22:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x181280, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x0, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7, 0x8, 0x800, 0x200}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'gre0\x00', r2, 0x20, 0x700, 0x4ea, 0x3f, {{0x30, 0x4, 0x1, 0x22, 0xc0, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3c}, {[@noop, @timestamp={0x44, 0x18, 0xb, 0x0, 0x2, [0x4d5830ee, 0x5, 0xffff0001, 0xfff, 0x9]}, @lsrr={0x83, 0x23, 0x48, [@private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @private=0xa010101, @private=0xa010102, @broadcast, @loopback]}, @timestamp_addr={0x44, 0x24, 0xa6, 0x1, 0x5, [{@remote, 0x6}, {@remote, 0x4}, {@loopback, 0x20000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8dd}]}, @lsrr={0x83, 0x2b, 0x5d, [@broadcast, @private=0xa010101, @loopback, @rand_addr=0x64010101, @multicast2, @loopback, @local, @private=0xa010101, @broadcast, @private=0xa010101]}, @generic={0x82, 0x7, "82d437b101"}, @noop, @ssrr={0x89, 0xb, 0x18, [@local, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x71, 0x3, 0x2, [{@local, 0xaf}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x12, 0x1d}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7, 0x7, 0xf1, 0x4, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x65, 0x0, 0x9, 0x29, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x18, 0x8f, 0x0, 0x4, [0x8, 0x0, 0x20, 0xfffffffe, 0xb6b8]}, @generic={0x9b, 0x10, "b925a67fdbc45c4c83d3a754e306"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @private=0xa010100, @loopback]}]}}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x181280, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x0, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7, 0x8, 0x800, 0x200}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'gre0\x00', r2, 0x20, 0x700, 0x4ea, 0x3f, {{0x30, 0x4, 0x1, 0x22, 0xc0, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3c}, {[@noop, @timestamp={0x44, 0x18, 0xb, 0x0, 0x2, [0x4d5830ee, 0x5, 0xffff0001, 0xfff, 0x9]}, @lsrr={0x83, 0x23, 0x48, [@private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @private=0xa010101, @private=0xa010102, @broadcast, @loopback]}, @timestamp_addr={0x44, 0x24, 0xa6, 0x1, 0x5, [{@remote, 0x6}, {@remote, 0x4}, {@loopback, 0x20000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8dd}]}, @lsrr={0x83, 0x2b, 0x5d, [@broadcast, @private=0xa010101, @loopback, @rand_addr=0x64010101, @multicast2, @loopback, @local, @private=0xa010101, @broadcast, @private=0xa010101]}, @generic={0x82, 0x7, "82d437b101"}, @noop, @ssrr={0x89, 0xb, 0x18, [@local, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x71, 0x3, 0x2, [{@local, 0xaf}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x12, 0x1d}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800}) (async) getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7, 0x7, 0xf1, 0x4, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x65, 0x0, 0x9, 0x29, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x18, 0x8f, 0x0, 0x4, [0x8, 0x0, 0x20, 0xfffffffe, 0xb6b8]}, @generic={0x9b, 0x10, "b925a67fdbc45c4c83d3a754e306"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @private=0xa010100, @loopback]}]}}}}}) (async) 00:22:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x600000000000000}, 0x0) 00:22:21 executing program 0: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4080000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00f8be2ca98064e48f548883cbdf03e4b1664a481ff62c324720f9e1a4e11af4ef2501278a33c7f32d226d845431c8a38a15f4b5427b71f78cd1f74910a4fe26fd77aa33afc60cf878956738cec14089a1d5fb8d7c410d9f3904b1b85f7ee9f0635512ab0cd4e3282764cff37a"], 0x14}, 0x1, 0x0, 0x0, 0x8c11}, 0x20048844) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'sit0\x00', 0x0}) 00:22:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={r0, r1, 0x8, 0xc2, &(0x7f0000000080)="15625948c8ae60414d55fb04f2b778b8bd55702f80de95619e1aed85e3da991e4ffcb69b65f47d1660743dd30dd6dc8dd0bba57f4f2e0bd87d49bb3ad94baabb45cf6cc0c4c6c123987a9e41d0b15f2cb3655fe738daaab14767f84db34604ba186d88a11556c6d1a57011968b1fef0ad9b262002563c9344a2a56bb14b56773fe32a54066a111fa809dcfa497a5a35b5613d702c2a4eae92b8ab32fb21fa3e2ffd6aaac103c4bbd350cf7f471319fcb2487ea6a61634282f7b226332b08f28d2491", 0x8, 0x0, 0x81, 0x3, 0x8, 0x3, 0x9, 'syz1\x00'}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x8906, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={r0, r1, 0x8, 0xc2, &(0x7f0000000080)="15625948c8ae60414d55fb04f2b778b8bd55702f80de95619e1aed85e3da991e4ffcb69b65f47d1660743dd30dd6dc8dd0bba57f4f2e0bd87d49bb3ad94baabb45cf6cc0c4c6c123987a9e41d0b15f2cb3655fe738daaab14767f84db34604ba186d88a11556c6d1a57011968b1fef0ad9b262002563c9344a2a56bb14b56773fe32a54066a111fa809dcfa497a5a35b5613d702c2a4eae92b8ab32fb21fa3e2ffd6aaac103c4bbd350cf7f471319fcb2487ea6a61634282f7b226332b08f28d2491", 0x8, 0x0, 0x81, 0x3, 0x8, 0x3, 0x9, 'syz1\x00'}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x8906, 0x0) (async) 00:22:21 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@any, 0x9}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@empty, 0x0, 0x0, 0x10, 0x0, [{@private}]}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000000)={'erspan0\x00', 0x0}) 00:22:21 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0xc0, 0x298, 0x200, 0x160, 0x298, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffff, 0x3, @multicast1, 0x4e21}}}, {{@ip={@private=0xa010102, @local, 0x0, 0xff, 'vlan1\x00', 'wg1\x00', {}, {0xff}, 0x8, 0x3, 0x8}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x101, 0xfff, 0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x4, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xba}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x10, 0x20, 0x40, 0x1000, {{0x10, 0x4, 0x1, 0x3d, 0x40, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@rr={0x7, 0x27, 0x35, [@broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast, @broadcast, @empty, @multicast1, @rand_addr=0x64010102, @multicast2]}, @end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x710, 0x700, 0x3, 0x6, {{0xf, 0x4, 0x3, 0x4, 0x3c, 0x68, 0x0, 0xff, 0x29, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x6d, 0x3, 0x2, [{@broadcast, 0xff}]}, @lsrr={0x83, 0x1b, 0x86, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}]}}}}}) 00:22:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x700000000000000}, 0x0) 00:22:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@private=0x2, 0x0, 0x0, 0x10, 0x0, [{@dev}]}}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x13, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0]}, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x13, 0x1800}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)=']\x00', &(0x7f0000000080)='\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={@private=0x2, 0x0, 0x0, 0x10, 0x0, [{@dev}]}}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x13, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0]}, 0x40) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x13, 0x1800}) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)=']\x00', &(0x7f0000000080)='\x00', 0x0) (async) 00:22:21 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0xc0) 00:22:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x181280, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000280), 0x181280, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x29, 0x7, 0x0, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7, 0x8, 0x800, 0x200}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'gre0\x00', r2, 0x20, 0x700, 0x4ea, 0x3f, {{0x30, 0x4, 0x1, 0x22, 0xc0, 0x64, 0x0, 0x7, 0x29, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3c}, {[@noop, @timestamp={0x44, 0x18, 0xb, 0x0, 0x2, [0x4d5830ee, 0x5, 0xffff0001, 0xfff, 0x9]}, @lsrr={0x83, 0x23, 0x48, [@private=0xa010100, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @private=0xa010101, @private=0xa010102, @broadcast, @loopback]}, @timestamp_addr={0x44, 0x24, 0xa6, 0x1, 0x5, [{@remote, 0x6}, {@remote, 0x4}, {@loopback, 0x20000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8dd}]}, @lsrr={0x83, 0x2b, 0x5d, [@broadcast, @private=0xa010101, @loopback, @rand_addr=0x64010101, @multicast2, @loopback, @local, @private=0xa010101, @broadcast, @private=0xa010101]}, @generic={0x82, 0x7, "82d437b101"}, @noop, @ssrr={0x89, 0xb, 0x18, [@local, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x71, 0x3, 0x2, [{@local, 0xaf}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x12, 0x1d}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x12, 0x1d}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) getsockopt$inet_udp_int(r3, 0x11, 0x66, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7, 0x7, 0xf1, 0x4, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x65, 0x0, 0x9, 0x29, 0x0, @loopback, @multicast1, {[@timestamp={0x44, 0x18, 0x8f, 0x0, 0x4, [0x8, 0x0, 0x20, 0xfffffffe, 0xb6b8]}, @generic={0x9b, 0x10, "b925a67fdbc45c4c83d3a754e306"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x16, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @private=0xa010100, @private=0xa010100, @loopback]}]}}}}}) 00:22:21 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000000)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000000)={'syztnl2\x00', 0x0}) (async) 00:22:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x900000000000000}, 0x0) 00:22:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1, 0x80000}) fsmount(r1, 0x1, 0x6) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xf3bb, 0x81) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000100)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:22 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0xc0) 00:22:22 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0xc0, 0x298, 0x200, 0x160, 0x298, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffff, 0x3, @multicast1, 0x4e21}}}, {{@ip={@private=0xa010102, @local, 0x0, 0xff, 'vlan1\x00', 'wg1\x00', {}, {0xff}, 0x8, 0x3, 0x8}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x101, 0xfff, 0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x4, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xba}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x10, 0x20, 0x40, 0x1000, {{0x10, 0x4, 0x1, 0x3d, 0x40, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@rr={0x7, 0x27, 0x35, [@broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast, @broadcast, @empty, @multicast1, @rand_addr=0x64010102, @multicast2]}, @end, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x10, 0x20, 0x40, 0x1000, {{0x10, 0x4, 0x1, 0x3d, 0x40, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@rr={0x7, 0x27, 0x35, [@broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast, @broadcast, @empty, @multicast1, @rand_addr=0x64010102, @multicast2]}, @end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x710, 0x700, 0x3, 0x6, {{0xf, 0x4, 0x3, 0x4, 0x3c, 0x68, 0x0, 0xff, 0x29, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x6d, 0x3, 0x2, [{@broadcast, 0xff}]}, @lsrr={0x83, 0x1b, 0x86, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}]}}}}}) 00:22:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x4000000000000000}, 0x0) 00:22:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000000)=""/117, 0x75, 0x40, &(0x7f0000000080)={0x23, 0x7c, 0x2, 0x1}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bind$phonet(r1, &(0x7f00000000c0)={0x23, 0x8, 0x80, 0x4}, 0x10) 00:22:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0xc0) (async) 00:22:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1, 0x80000}) fsmount(r1, 0x1, 0x6) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xf3bb, 0x81) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000100)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000000)=""/117, 0x75, 0x40, &(0x7f0000000080)={0x23, 0x7c, 0x2, 0x1}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bind$phonet(r1, &(0x7f00000000c0)={0x23, 0x8, 0x80, 0x4}, 0x10) 00:22:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x9227000000000000}, 0x0) 00:22:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x0, 0x101) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x28, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="100028bd7000ffdb000000000000000000e074712058"], 0x1c}}, 0x4010) socket$inet6(0xa, 0x5, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) setsockopt$inet_dccp_int(r3, 0x21, 0x3, &(0x7f00000001c0)=0xb0, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1, 0x80000}) fsmount(r1, 0x1, 0x6) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xf3bb, 0x81) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000100)={0x2, 0x0, &(0x7f00000000c0)=[0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000000)=""/117, 0x75, 0x40, &(0x7f0000000080)={0x23, 0x7c, 0x2, 0x1}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bind$phonet(r1, &(0x7f00000000c0)={0x23, 0x8, 0x80, 0x4}, 0x10) 00:22:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 00:22:22 executing program 0: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0xc0, 0x298, 0x200, 0x160, 0x298, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffff, 0x3, @multicast1, 0x4e21}}}, {{@ip={@private=0xa010102, @local, 0x0, 0xff, 'vlan1\x00', 'wg1\x00', {}, {0xff}, 0x8, 0x3, 0x8}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x101, 0xfff, 0x20}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x4, 0x1}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0xba}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x10, 0x20, 0x40, 0x1000, {{0x10, 0x4, 0x1, 0x3d, 0x40, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@rr={0x7, 0x27, 0x35, [@broadcast, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast, @broadcast, @empty, @multicast1, @rand_addr=0x64010102, @multicast2]}, @end, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r2, 0x710, 0x700, 0x3, 0x6, {{0xf, 0x4, 0x3, 0x4, 0x3c, 0x68, 0x0, 0xff, 0x29, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x6d, 0x3, 0x2, [{@broadcast, 0xff}]}, @lsrr={0x83, 0x1b, 0x86, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x15}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}]}}}}}) 00:22:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x28, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="100028bd7000ffdb000000000000000000e074712058"], 0x1c}}, 0x4010) socket$inet6(0xa, 0x5, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) setsockopt$inet_dccp_int(r3, 0x21, 0x3, &(0x7f00000001c0)=0xb0, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair(0x28, 0x1, 0x5, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="100028bd7000ffdb000000000000000000e074712058"], 0x1c}}, 0x4010) (async) socket$inet6(0xa, 0x5, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) setsockopt$inet_dccp_int(r3, 0x21, 0x3, &(0x7f00000001c0)=0xb0, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) (async) 00:22:22 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x26ac40, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0xffff80002bb5ffff}, 0x0) 00:22:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x0, 0x101) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:22 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x26ac40, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x28, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="100028bd7000ffdb000000000000000000e074712058"], 0x1c}}, 0x4010) (async) socket$inet6(0xa, 0x5, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) setsockopt$inet_dccp_int(r3, 0x21, 0x3, &(0x7f00000001c0)=0xb0, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0xffffb52b0080ffff}, 0x0) 00:22:22 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x26ac40, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="e9168c108abb787121180000001d", @ANYRES32=0x0, @ANYBLOB="0020004000000008000000044c260030006400007304907800000000ac1414aa441c0823ffffffff00000006ac14143f00000001000000000000096a"]}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) 00:22:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 00:22:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x4000081) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x40}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x121001, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="e9168c108abb787121180000001d", @ANYRES32=0x0, @ANYBLOB="0020004000000008000000044c260030006400007304907800000000ac1414aa441c0823ffffffff00000006ac14143f00000001000000000000096a"]}) (async, rerun: 32) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) 00:22:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 00:22:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x0, 0x101) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet(0x2, 0x0, 0x101) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 00:22:22 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@empty, 0x1, 0x0, 0x70, 0x0, [{@broadcast}, {@multicast2}, {@empty}, {@private}, {@broadcast}, {@private}, {}]}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:22 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x4000081) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x4000081) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:22:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="e9168c108abb787121180000001d", @ANYRES32=0x0, @ANYBLOB="0020004000000008000000044c260030006400007304907800000000ac1414aa441c0823ffffffff00000006ac14143f00000001000000000000096a"]}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="e9168c108abb787121180000001d", @ANYRES32=0x0, @ANYBLOB="0020004000000008000000044c260030006400007304907800000000ac1414aa441c0823ffffffff00000006ac14143f00000001000000000000096a"]}) (async) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) (async) 00:22:22 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@empty, 0x1, 0x0, 0x70, 0x0, [{@broadcast}, {@multicast2}, {@empty}, {@private}, {@broadcast}, {@private}, {}]}}) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x2) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x60}, 0x4000081) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:22 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_setlink={0x154, 0x13, 0x8, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x40200, 0x2028c}, [@IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_LINKMODE={0x5, 0x11, 0x20}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x487}, @IFLA_IFALIASn={0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0xfffffffb}, @IFLA_LINKINFO={0xd4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3f, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x5}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x5}}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xf6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9}}]}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x101, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x1}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000400}, 0x4004844) 00:22:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 00:22:22 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) 00:22:22 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1000}, 0x851) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8901, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 00:22:22 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x4) (async, rerun: 64) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0xcccccccc}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (rerun: 32) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:22 executing program 4: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@empty, 0x1, 0x0, 0x70, 0x0, [{@broadcast}, {@multicast2}, {@empty}, {@private}, {@broadcast}, {@private}, {}]}}) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 00:22:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_setlink={0x154, 0x13, 0x8, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x40200, 0x2028c}, [@IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_LINKMODE={0x5, 0x11, 0x20}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x487}, @IFLA_IFALIASn={0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0xfffffffb}, @IFLA_LINKINFO={0xd4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3f, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x5}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x5}}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xf6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9}}]}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x101, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x1}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000400}, 0x4004844) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_setlink={0x154, 0x13, 0x8, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x40200, 0x2028c}, [@IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_LINKMODE={0x5, 0x11, 0x20}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x487}, @IFLA_IFALIASn={0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0xfffffffb}, @IFLA_LINKINFO={0xd4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3f, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x5}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x5}}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xf6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9}}]}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x101, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x1}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000400}, 0x4004844) (async) 00:22:22 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) (async) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) 00:22:22 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 32) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1000}, 0x851) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8901, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 00:22:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:22:22 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x4) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:22 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x0, 0x1a0, 0x108, 0x340, 0x340, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x5, 0x1, 0x4, 0x7, 0x4, 0x3], 0x3}}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7a, 0x401, @rand_addr=0x64010101, 0x4e20}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffff00, 0xffffffff, 'batadv_slave_0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x34, 0x3, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010101, @remote, 0xff, 0xff000000, 'dummy0\x00', 'sit0\x00', {0xff}, {0xff}, 0x2, 0x2, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x9c000000, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x3c}, 0xffffff00, 0x0, 'geneve0\x00', 'vlan0\x00', {}, {0xff}, 0x5c, 0x1, 0xb3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x10000, 0x6, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=@bridge_setlink={0x154, 0x13, 0x8, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x40200, 0x2028c}, [@IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_LINKMODE={0x5, 0x11, 0x20}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x487}, @IFLA_IFALIASn={0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0xfffffffb}, @IFLA_LINKINFO={0xd4, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc4, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3f, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8000, 0x5}}]}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x5}}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1d, 0x200}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1f}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa2, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0xf6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9}}]}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x101, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x1}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}]}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000400}, 0x4004844) 00:22:23 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1000}, 0x851) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8901, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 00:22:23 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) (async) 00:22:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 00:22:23 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (rerun: 64) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x0, 0x1a0, 0x108, 0x340, 0x340, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x5, 0x1, 0x4, 0x7, 0x4, 0x3], 0x3}}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7a, 0x401, @rand_addr=0x64010101, 0x4e20}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffff00, 0xffffffff, 'batadv_slave_0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x34, 0x3, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010101, @remote, 0xff, 0xff000000, 'dummy0\x00', 'sit0\x00', {0xff}, {0xff}, 0x2, 0x2, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x9c000000, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x3c}, 0xffffff00, 0x0, 'geneve0\x00', 'vlan0\x00', {}, {0xff}, 0x5c, 0x1, 0xb3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x10000, 0x6, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc096}, 0x44080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 1: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/171, 0xab, 0x0, &(0x7f0000000100)=""/143, 0x8f}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) 00:22:23 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x9, @val=@perf_event={0xc09}}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000001000000000000ff000000af59fefff0ffffff08b1200008000000186200000b0000000000000002000000bc3df4ffffffffff185800000f00000000000000000000001800000001800000000000000400000095000000000000001800000007b900000000000080000000950000000000000095000000000000009500000000000000fdffc27a8da472f85cc52a146a4958385d7e8c749a5ff5fddd9c6e9222dc3b8bf180b3c5010679c834cdc3d676ba6e2510ad092d43266e9121d23360498867e5583b8d8e32101a0f4bb613e9b1e51b3ce1b6ed6631f78375d3d8b612fd4e1d6f3382cba9779d4180905577162515181a87aefb9d7d484877219982bd39467fecd5c5a7cf2a1efef784e34d62dc7e8f1ec707f44cb37b265dfe7163f0471e19289b583c081b8dfe71ce523636a4a5063076c64e5f8f10557d17f4d670c50e21e00f6b84f765dc"], &(0x7f0000000100)='GPL\x00', 0x541, 0x39, &(0x7f0000000140)=""/57, 0x40f00, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x5, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[r0, r1, r1, r0, r1, r0], &(0x7f0000000280)=[{0x1, 0x1, 0x10, 0xc}, {0x0, 0x3, 0xe, 0x7}, {0x3, 0x3, 0x7, 0xc}], 0x10, 0xfffff00a}, 0x90) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r3, r4, 0x3, 0x0, @val=@netfilter={0x7, 0x313768f7faf57aae, 0x5}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000480)={0x1, r6}) 00:22:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 00:22:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "a299", 0x1}}, @common=@ah={{0x30}, {[0x9, 0x4], 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x8, 0xfffffe01, 0xdceac5e, 'snmp_trap\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc096}, 0x44080) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 1: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/171, 0xab, 0x0, &(0x7f0000000100)=""/143, 0x8f}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) [ 1343.206676][T19273] x_tables: duplicate underflow at hook 3 00:22:23 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x9, @val=@perf_event={0xc09}}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x541, 0x39, &(0x7f0000000140)=""/57, 0x40f00, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x5, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[r0, r1, r1, r0, r1, r0], &(0x7f0000000280)=[{0x1, 0x1, 0x10, 0xc}, {0x0, 0x3, 0xe, 0x7}, {0x3, 0x3, 0x7, 0xc}], 0x10, 0xfffff00a}, 0x90) (async) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r3, r4, 0x3, 0x0, @val=@netfilter={0x7, 0x313768f7faf57aae, 0x5}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000480)={0x1, r6}) 00:22:23 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x0, 0x1a0, 0x108, 0x340, 0x340, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0xd8, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x5, 0x1, 0x4, 0x7, 0x4, 0x3], 0x3}}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7a, 0x401, @rand_addr=0x64010101, 0x4e20}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffff00, 0xffffffff, 'batadv_slave_0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x34, 0x3, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010101, @remote, 0xff, 0xff000000, 'dummy0\x00', 'sit0\x00', {0xff}, {0xff}, 0x2, 0x2, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x9c000000, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x3c}, 0xffffff00, 0x0, 'geneve0\x00', 'vlan0\x00', {}, {0xff}, 0x5c, 0x1, 0xb3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x10000, 0x6, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (rerun: 32) 00:22:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7}, 0x0) 00:22:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "a299", 0x1}}, @common=@ah={{0x30}, {[0x9, 0x4], 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x8, 0xfffffe01, 0xdceac5e, 'snmp_trap\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@getaddr={0x14, 0x16, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xc096}, 0x44080) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 1: r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r0, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/171, 0xab, 0x0, &(0x7f0000000100)=""/143, 0x8f}}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) 00:22:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x0) 00:22:23 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x9, @val=@perf_event={0xc09}}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000001000000000000ff000000af59fefff0ffffff08b1200008000000186200000b0000000000000002000000bc3df4ffffffffff185800000f00000000000000000000001800000001800000000000000400000095000000000000001800000007b900000000000080000000950000000000000095000000000000009500000000000000fdffc27a8da472f85cc52a146a4958385d7e8c749a5ff5fddd9c6e9222dc3b8bf180b3c5010679c834cdc3d676ba6e2510ad092d43266e9121d23360498867e5583b8d8e32101a0f4bb613e9b1e51b3ce1b6ed6631f78375d3d8b612fd4e1d6f3382cba9779d4180905577162515181a87aefb9d7d484877219982bd39467fecd5c5a7cf2a1efef784e34d62dc7e8f1ec707f44cb37b265dfe7163f0471e19289b583c081b8dfe71ce523636a4a5063076c64e5f8f10557d17f4d670c50e21e00f6b84f765dc"], &(0x7f0000000100)='GPL\x00', 0x541, 0x39, &(0x7f0000000140)=""/57, 0x40f00, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x5, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[r0, r1, r1, r0, r1, r0], &(0x7f0000000280)=[{0x1, 0x1, 0x10, 0xc}, {0x0, 0x3, 0xe, 0x7}, {0x3, 0x3, 0x7, 0xc}], 0x10, 0xfffff00a}, 0x90) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x541, 0x39, &(0x7f0000000140)=""/57, 0x40f00, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000001c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x5, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[r0, r1, r1, r0, r1, r0], &(0x7f0000000280)=[{0x1, 0x1, 0x10, 0xc}, {0x0, 0x3, 0xe, 0x7}, {0x3, 0x3, 0x7, 0xc}], 0x10, 0xfffff00a}, 0x90) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r3, r4, 0x3, 0x0, @val=@netfilter={0x7, 0x313768f7faf57aae, 0x5}}, 0x40) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r3, r4, 0x3, 0x0, @val=@netfilter={0x7, 0x313768f7faf57aae, 0x5}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000003c0)=r1, 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r4, 0xc01864ba, &(0x7f0000000480)={0x1, r6}) 00:22:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x8, {{0xa, 0x4, 0x3, 0x13, 0x52, 0x867, 0x0, 0xf2, 0x4, 0x0, @broadcast, @empty, {[@end, @ssrr={0x89, 0x13, 0x88, [@rand_addr=0x64010101, @loopback, @broadcast, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', r1, 0x4, 0xfd, 0x0, 0x8, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x700, 0x7ba6b653a89b6f93, 0x2, 0x7ff}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc880}, 0x20000040) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup=r3, 0x5, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) [ 1343.327884][T19296] x_tables: duplicate underflow at hook 3 00:22:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = socket$inet(0x2, 0x804, 0x9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0080780023c910b40000800142b1004800650000082990787f000001ac1414bb000a3f9cf5b5cb41591d890eb89b7ccf5f0300007be96b1f9404010000940400000713e97f0000010a010102ac1414aaac141439"]}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4085}, 0x4008080) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="c44d001000000000000000295000000842180048004600001f049078ac14142eac141436861500000001050a8c4b0e6199f77688fe052baef4441c821000008001000009360000000000010001000000090000008100"]}) r3 = fsmount(0xffffffffffffffff, 0x1, 0x70) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r5, 0x5, 0x27, &(0x7f00000000c0)="47813257d1da6558e82e6a99b2b9866cf5e305265fe66568bfe4a1a3979b462928eb886dd81db0", 0x81, 0x2, 0x6, 0x3, 0x6, 0x3, 0x2, 'syz0\x00'}) 00:22:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = socket$inet(0x2, 0x5, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r3) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x8, {{0xa, 0x4, 0x3, 0x13, 0x52, 0x867, 0x0, 0xf2, 0x4, 0x0, @broadcast, @empty, {[@end, @ssrr={0x89, 0x13, 0x88, [@rand_addr=0x64010101, @loopback, @broadcast, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', r1, 0x4, 0xfd, 0x0, 0x8, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x700, 0x7ba6b653a89b6f93, 0x2, 0x7ff}}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc880}, 0x20000040) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup=r3, 0x5, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 00:22:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 00:22:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "a299", 0x1}}, @common=@ah={{0x30}, {[0x9, 0x4], 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x8, 0xfffffe01, 0xdceac5e, 'snmp_trap\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() r2 = gettid() syz_open_procfs$namespace(r2, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/mnt\x00') syz_open_procfs$namespace(r1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xcb, 0x0, 0x9, 0x5, 0x400, r1}) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x4, r0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)=r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000500), 0x8000000000000001, 0xc0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000540)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r8, 0xc00464af, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r7, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) [ 1343.415044][T19314] x_tables: duplicate underflow at hook 3 00:22:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x4, 0x40, 0xfffffff9, 0xc0, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x68, 0x0, 0xb1, 0x4, 0x0, @private=0xa010100, @loopback, {[@rr={0x7, 0x1f, 0xb9, [@multicast2, @multicast1, @remote, @multicast1, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}]}, @generic={0x0, 0x9, "4d0578c966b479"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x8, 0x8, {{0xa, 0x4, 0x3, 0x13, 0x52, 0x867, 0x0, 0xf2, 0x4, 0x0, @broadcast, @empty, {[@end, @ssrr={0x89, 0x13, 0x88, [@rand_addr=0x64010101, @loopback, @broadcast, @rand_addr=0x64010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6gre0\x00', r1, 0x4, 0xfd, 0x0, 0x8, 0x60, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x700, 0x7ba6b653a89b6f93, 0x2, 0x7ff}}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc880}, 0x20000040) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup=r3, 0x5, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 00:22:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x500}, 0x0) 00:22:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = gettid() r2 = gettid() syz_open_procfs$namespace(r2, 0x0) (async) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/mnt\x00') (async) syz_open_procfs$namespace(r1, 0x0) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xcb, 0x0, 0x9, 0x5, 0x400, r1}) (async, rerun: 64) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)=0x4) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x4, r0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)=r5) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) (async) r10 = syz_open_dev$dri(&(0x7f0000000500), 0x8000000000000001, 0xc0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000540)={0x0, 0x0, r10}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_RMFB(r8, 0xc00464af, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r7, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x38}}, 0x0) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (rerun: 64) 00:22:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x4, 0x40, 0xfffffff9, 0xc0, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x68, 0x0, 0xb1, 0x4, 0x0, @private=0xa010100, @loopback, {[@rr={0x7, 0x1f, 0xb9, [@multicast2, @multicast1, @remote, @multicast1, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}]}, @generic={0x0, 0x9, "4d0578c966b479"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 00:22:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet(0x2, 0x804, 0x9) (async) r1 = socket$inet(0x2, 0x804, 0x9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0080780023c910b40000800142b1004800650000082990787f000001ac1414bb000a3f9cf5b5cb41591d890eb89b7ccf5f0300007be96b1f9404010000940400000713e97f0000010a010102ac1414aaac141439"]}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4085}, 0x4008080) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="c44d001000000000000000295000000842180048004600001f049078ac14142eac141436861500000001050a8c4b0e6199f77688fe052baef4441c821000008001000009360000000000010001000000090000008100"]}) r3 = fsmount(0xffffffffffffffff, 0x1, 0x70) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r5, 0x5, 0x27, &(0x7f00000000c0)="47813257d1da6558e82e6a99b2b9866cf5e305265fe66568bfe4a1a3979b462928eb886dd81db0", 0x81, 0x2, 0x6, 0x3, 0x6, 0x3, 0x2, 'syz0\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r5, 0x5, 0x27, &(0x7f00000000c0)="47813257d1da6558e82e6a99b2b9866cf5e305265fe66568bfe4a1a3979b462928eb886dd81db0", 0x81, 0x2, 0x6, 0x3, 0x6, 0x3, 0x2, 'syz0\x00'}) 00:22:23 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = socket$inet(0x2, 0x5, 0x1) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r3) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x2, 0x800, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x471, 0x21, &(0x7f0000000040)="4c34a8645b438c144c6287cc190d5e6b7d3d749a270db73ee86bf0b8bbdc78ad0b", 0x80, 0x1, 0x1, 0x6eed, 0x400, 0x0, 0x8000, 'syz0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"]) 00:22:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 00:22:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x4, 0x40, 0xfffffff9, 0xc0, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x68, 0x0, 0xb1, 0x4, 0x0, @private=0xa010100, @loopback, {[@rr={0x7, 0x1f, 0xb9, [@multicast2, @multicast1, @remote, @multicast1, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}]}, @generic={0x0, 0x9, "4d0578c966b479"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x4, 0x40, 0xfffffff9, 0xc0, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x68, 0x0, 0xb1, 0x4, 0x0, @private=0xa010100, @loopback, {[@rr={0x7, 0x1f, 0xb9, [@multicast2, @multicast1, @remote, @multicast1, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}]}, @generic={0x0, 0x9, "4d0578c966b479"}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = gettid() (async) r2 = gettid() syz_open_procfs$namespace(r2, 0x0) (async) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/mnt\x00') (async, rerun: 64) syz_open_procfs$namespace(r1, 0x0) (async, rerun: 64) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xcb, 0x0, 0x9, 0x5, 0x400, r1}) (async) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000300)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000003c0)={0x4, r0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)=r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000500), 0x8000000000000001, 0xc0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000540)={0x0, 0x0, r10}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r8, 0xc00464af, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r7, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x38}}, 0x0) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x900}, 0x0) 00:22:23 executing program 2: socketpair(0x5, 0xa, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000040)="f2966f72a53165e1b62d97d74cca3d46af36e3f41e3ac70f5c8c939a003072b8d64a4bf4143f957eaefbc9d6dbbdda027241ed4cb3a5abf6954788b33eadba7eabc707d9ee0bc38a5b3dac35376dbbd327486c950cf19de4db263baa5e6eb188d35703d9ad3a6bd75f0d644b292bfb7610b33d0110003d3aeb9724b8fc0e7225e78ee017fd5bb69e787fbf213eb3160272de560ba60b7287099abb2376e2aec3a24e2833d9f6f0e07579bd7a487debf698", 0xb1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) getitimer(0x0, &(0x7f0000000100)) 00:22:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = socket$inet(0x2, 0x804, 0x9) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0080780023c910b40000800142b1004800650000082990787f000001ac1414bb000a3f9cf5b5cb41591d890eb89b7ccf5f0300007be96b1f9404010000940400000713e97f0000010a010102ac1414aaac141439"]}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x18, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4085}, 0x4008080) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="c44d001000000000000000295000000842180048004600001f049078ac14142eac141436861500000001050a8c4b0e6199f77688fe052baef4441c821000008001000009360000000000010001000000090000008100"]}) (async) r3 = fsmount(0xffffffffffffffff, 0x1, 0x70) (async) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r5, 0x5, 0x27, &(0x7f00000000c0)="47813257d1da6558e82e6a99b2b9866cf5e305265fe66568bfe4a1a3979b462928eb886dd81db0", 0x81, 0x2, 0x6, 0x3, 0x6, 0x3, 0x2, 'syz0\x00'}) 00:22:23 executing program 0: ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000040)='3\x00', 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdb71, 0x0, 0x0, 0x0, 0x7494}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7cd, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f00000000c0)='syzkaller\x00', 0xfffff6ee, 0xf8, &(0x7f00000001c0)=""/248, 0x40f00, 0x35, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x5, 0x3, 0xf, 0x9}, {0x1, 0x3, 0x4, 0xb}, {0x3, 0x1, 0xe, 0x3}, {0x1, 0x4, 0x2, 0x7}, {0x0, 0x2, 0xd, 0xe}, {0x5, 0x4, 0x8, 0x4}, {0x0, 0x1, 0x6, 0x2}], 0x10, 0x1}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r0, 0x1}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2792}, 0x0) 00:22:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = socket$inet(0x2, 0x5, 0x1) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 64) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r3) (async) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:23 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair(0x2, 0x800, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 64) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x471, 0x21, &(0x7f0000000040)="4c34a8645b438c144c6287cc190d5e6b7d3d749a270db73ee86bf0b8bbdc78ad0b", 0x80, 0x1, 0x1, 0x6eed, 0x400, 0x0, 0x8000, 'syz0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"]) 00:22:23 executing program 0: ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000040)='3\x00', 0x2) (async, rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdb71, 0x0, 0x0, 0x0, 0x7494}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7cd, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f00000000c0)='syzkaller\x00', 0xfffff6ee, 0xf8, &(0x7f00000001c0)=""/248, 0x40f00, 0x35, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x5, 0x3, 0xf, 0x9}, {0x1, 0x3, 0x4, 0xb}, {0x3, 0x1, 0xe, 0x3}, {0x1, 0x4, 0x2, 0x7}, {0x0, 0x2, 0xd, 0xe}, {0x5, 0x4, 0x8, 0x4}, {0x0, 0x1, 0x6, 0x2}], 0x10, 0x1}, 0x90) (rerun: 32) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r0, 0x1}, 0xc) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:23 executing program 2: socketpair(0x5, 0xa, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000040)="f2966f72a53165e1b62d97d74cca3d46af36e3f41e3ac70f5c8c939a003072b8d64a4bf4143f957eaefbc9d6dbbdda027241ed4cb3a5abf6954788b33eadba7eabc707d9ee0bc38a5b3dac35376dbbd327486c950cf19de4db263baa5e6eb188d35703d9ad3a6bd75f0d644b292bfb7610b33d0110003d3aeb9724b8fc0e7225e78ee017fd5bb69e787fbf213eb3160272de560ba60b7287099abb2376e2aec3a24e2833d9f6f0e07579bd7a487debf698", 0xb1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) getitimer(0x0, &(0x7f0000000100)) socketpair(0x5, 0xa, 0x80000001, &(0x7f0000000000)) (async) setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000040)="f2966f72a53165e1b62d97d74cca3d46af36e3f41e3ac70f5c8c939a003072b8d64a4bf4143f957eaefbc9d6dbbdda027241ed4cb3a5abf6954788b33eadba7eabc707d9ee0bc38a5b3dac35376dbbd327486c950cf19de4db263baa5e6eb188d35703d9ad3a6bd75f0d644b292bfb7610b33d0110003d3aeb9724b8fc0e7225e78ee017fd5bb69e787fbf213eb3160272de560ba60b7287099abb2376e2aec3a24e2833d9f6f0e07579bd7a487debf698", 0xb1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) getitimer(0x0, &(0x7f0000000100)) (async) 00:22:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 00:22:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_newvlan={0x84, 0x70, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x100}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'gretap0\x00', 0x0}) 00:22:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x2, 0x800, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x471, 0x21, &(0x7f0000000040)="4c34a8645b438c144c6287cc190d5e6b7d3d749a270db73ee86bf0b8bbdc78ad0b", 0x80, 0x1, 0x1, 0x6eed, 0x400, 0x0, 0x8000, 'syz0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"]) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair(0x2, 0x800, 0x4, &(0x7f0000000000)) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x471, 0x21, &(0x7f0000000040)="4c34a8645b438c144c6287cc190d5e6b7d3d749a270db73ee86bf0b8bbdc78ad0b", 0x80, 0x1, 0x1, 0x6eed, 0x400, 0x0, 0x8000, 'syz0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"]) (async) 00:22:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9227}, 0x0) 00:22:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_newvlan={0x84, 0x70, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x100}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:24 executing program 0: ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) write$yama_ptrace_scope(0xffffffffffffffff, &(0x7f0000000040)='3\x00', 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdb71, 0x0, 0x0, 0x0, 0x7494}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7cd, 0x0, 0x0, 0x0, 0x1000}]}, &(0x7f00000000c0)='syzkaller\x00', 0xfffff6ee, 0xf8, &(0x7f00000001c0)=""/248, 0x40f00, 0x35, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000140)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x5, 0x3, 0xf, 0x9}, {0x1, 0x3, 0x4, 0xb}, {0x3, 0x1, 0xe, 0x3}, {0x1, 0x4, 0x2, 0x7}, {0x0, 0x2, 0xd, 0xe}, {0x5, 0x4, 0x8, 0x4}, {0x0, 0x1, 0x6, 0x2}], 0x10, 0x1}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r0, 0x1}, 0xc) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (rerun: 32) 00:22:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'gretap0\x00', 0x0}) 00:22:24 executing program 2: socketpair(0x5, 0xa, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000040)="f2966f72a53165e1b62d97d74cca3d46af36e3f41e3ac70f5c8c939a003072b8d64a4bf4143f957eaefbc9d6dbbdda027241ed4cb3a5abf6954788b33eadba7eabc707d9ee0bc38a5b3dac35376dbbd327486c950cf19de4db263baa5e6eb188d35703d9ad3a6bd75f0d644b292bfb7610b33d0110003d3aeb9724b8fc0e7225e78ee017fd5bb69e787fbf213eb3160272de560ba60b7287099abb2376e2aec3a24e2833d9f6f0e07579bd7a487debf698", 0xb1) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) getitimer(0x0, &(0x7f0000000100)) 00:22:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 00:22:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@bridge_newvlan={0x84, 0x70, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x2}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x100}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'gretap0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'gretap0\x00', 0x0}) 00:22:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="73797a746e6c320000000010ad0f0000", @ANYRES32=0x0, @ANYBLOB="00087800000000090000000043ee004c006700000429907864010102ac14141600442844900000800140bf844c00000080000000820000ffff00009c470000000100000007000000c2440c0a200000071100000401000000"]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:24 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3, 0x400, 0x1f, 0x620, 0xffffffffffffffff, 0x448, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xc}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) 00:22:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 00:22:24 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socket$inet(0x2, 0x2, 0xffffffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000040)={'syztnl0\x00', 0x0}) 00:22:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="73797a746e6c320000000010ad0f0000", @ANYRES32=0x0, @ANYBLOB="00087800000000090000000043ee004c006700000429907864010102ac14141600442844900000800140bf844c00000080000000820000ffff00009c470000000100000007000000c2440c0a200000071100000401000000"]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000000)={'gretap0\x00', 0x0}) 00:22:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf250800000014001f00fc00000000000000000000000000000006001a004e230000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) write$yama_ptrace_scope(r2, &(0x7f0000000100)='1\x00', 0x2) 00:22:24 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3, 0x400, 0x1f, 0x620, 0xffffffffffffffff, 0x448, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xc}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) 00:22:24 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) socket$inet(0x2, 0x2, 0xffffffff) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000040)={'syztnl0\x00', 0x0}) 00:22:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="73797a746e6c320000000010ad0f0000", @ANYRES32=0x0, @ANYBLOB="00087800000000090000000043ee004c006700000429907864010102ac14141600442844900000800140bf844c00000080000000820000ffff00009c470000000100000007000000c2440c0a200000071100000401000000"]}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async, rerun: 32) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf250800000014001f00fc00000000000000000000000000000006001a004e230000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) write$yama_ptrace_scope(r2, &(0x7f0000000100)='1\x00', 0x2) 00:22:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000000)={'gretap0\x00', 0x0}) 00:22:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 00:22:24 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3, 0x400, 0x1f, 0x620, 0xffffffffffffffff, 0x448, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0xc}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) 00:22:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000000)={'gretap0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000000)={'gretap0\x00', 0x0}) (async) 00:22:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf250800000014001f00fc00000000000000000000000000000006001a004e230000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1, 0x80000, 0x0, 0xffffffffffffffff}) write$yama_ptrace_scope(r2, &(0x7f0000000100)='1\x00', 0x2) 00:22:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 00:22:24 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socket$inet(0x2, 0x2, 0xffffffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000040)={'syztnl0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) socket$inet(0x2, 0x2, 0xffffffff) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000040)={'syztnl0\x00', 0x0}) (async) 00:22:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000040)={'erspan0\x00', 0x0}) 00:22:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2, r0, 0x80000}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8906, 0x0) 00:22:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:22:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000040)={'erspan0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000040)={'erspan0\x00', 0x0}) 00:22:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 00:22:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'sit0\x00', 0x0}) 00:22:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:22:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2, r0, 0x80000}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8906, 0x0) 00:22:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000040)={'erspan0\x00', 0x0}) 00:22:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:22:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'sit0\x00', 0x0}) (rerun: 32) 00:22:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x2, r0, 0x80000}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8906, 0x0) 00:22:24 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 00:22:24 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) openat$cgroup_int(r0, &(0x7f0000000000)='cpu.max\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 00:22:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'sit0\x00', 0x0}) 00:22:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x1, 0x8000, 0x20, 0x8001, {{0x14, 0x4, 0x0, 0x38, 0x50, 0x65, 0x0, 0x2, 0x29, 0x0, @loopback, @remote, {[@ssrr={0x89, 0x13, 0x70, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x27, 0x1, [{0x7, 0xe, "4de754bf82ceb44543acd7e9"}, {0x5, 0x10, "4a59d6088b6c0020c3dc45a9f80d"}, {0x6, 0x3, "8d"}]}]}}}}}) 00:22:24 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'gretap0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fcdbdf25090000000c0006000200f9ff020000000500080014000000"], 0x28}}, 0x800) 00:22:24 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) openat$cgroup_int(r0, &(0x7f0000000000)='cpu.max\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) openat$cgroup_int(r0, &(0x7f0000000000)='cpu.max\x00', 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:24 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x2, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x4, 0x3, 0x3, 0x2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 00:22:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x1, 0x8000, 0x20, 0x8001, {{0x14, 0x4, 0x0, 0x38, 0x50, 0x65, 0x0, 0x2, 0x29, 0x0, @loopback, @remote, {[@ssrr={0x89, 0x13, 0x70, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x27, 0x1, [{0x7, 0xe, "4de754bf82ceb44543acd7e9"}, {0x5, 0x10, "4a59d6088b6c0020c3dc45a9f80d"}, {0x6, 0x3, "8d"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x1, 0x8000, 0x20, 0x8001, {{0x14, 0x4, 0x0, 0x38, 0x50, 0x65, 0x0, 0x2, 0x29, 0x0, @loopback, @remote, {[@ssrr={0x89, 0x13, 0x70, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x27, 0x1, [{0x7, 0xe, "4de754bf82ceb44543acd7e9"}, {0x5, 0x10, "4a59d6088b6c0020c3dc45a9f80d"}, {0x6, 0x3, "8d"}]}]}}}}}) 00:22:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 00:22:24 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'gretap0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fcdbdf25090000000c0006000200f9ff020000000500080014000000"], 0x28}}, 0x800) 00:22:24 executing program 4: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) openat$cgroup_int(r0, &(0x7f0000000000)='cpu.max\x00', 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 00:22:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 00:22:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x1, 0x8000, 0x20, 0x8001, {{0x14, 0x4, 0x0, 0x38, 0x50, 0x65, 0x0, 0x2, 0x29, 0x0, @loopback, @remote, {[@ssrr={0x89, 0x13, 0x70, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x27, 0x1, [{0x7, 0xe, "4de754bf82ceb44543acd7e9"}, {0x5, 0x10, "4a59d6088b6c0020c3dc45a9f80d"}, {0x6, 0x3, "8d"}]}]}}}}}) 00:22:25 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'gretap0\x00', 0x0}) (async) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fcdbdf25090000000c0006000200f9ff020000000500080014000000"], 0x28}}, 0x800) 00:22:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 00:22:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:25 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x2, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x4, 0x3, 0x3, 0x2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair(0x2, 0x800, 0x7, &(0x7f0000000000)) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x4, 0x3, 0x3, 0x2}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'syztnl0\x00', 0x0}) 00:22:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="080028bd7000fed9df2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8) 00:22:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) fsmount(r1, 0x0, 0xfa) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f00000002c0)={@rand_addr=0x64010102, 0x0, 0x0, 0x20, 0x0, [{@broadcast}, {@broadcast}]}}) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x2ec5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fffffffffffffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x86}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 00:22:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="080028bd7000fed9df2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8) 00:22:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) fsmount(r1, 0x0, 0xfa) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f00000002c0)={@rand_addr=0x64010102, 0x0, 0x0, 0x20, 0x0, [{@broadcast}, {@broadcast}]}}) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x2ec5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fffffffffffffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x86}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (rerun: 32) 00:22:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x92270000}, 0x0) 00:22:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:25 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x2, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 64) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x4, 0x3, 0x3, 0x2}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="080028bd7000fed9df2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8) 00:22:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) fsmount(r1, 0x0, 0xfa) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r3) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f00000002c0)={@rand_addr=0x64010102, 0x0, 0x0, 0x20, 0x0, [{@broadcast}, {@broadcast}]}}) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x2ec5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7fffffffffffffff}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010102}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x86}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 00:22:25 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:25 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 32) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 00:22:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x5, 0x1e}}) 00:22:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x9, 0x7, {{0x17, 0x4, 0x3, 0x20, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x31, 0x0, [{0x0, 0x3, 'X'}, {0x1, 0x3, "e0"}, {0x1, 0x8, "f100f4a77c85"}, {0x0, 0x4, "4a8d"}, {0x1, 0x8, "1b66a85f7d4d"}, {0x6, 0x11, "f2ef15a92ed1dd67c03674de65cc8b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x7, "ac141d7d46"}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0x3, 0x35}]}}}}}) 00:22:25 executing program 2: socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) 00:22:25 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x5, 0x1e}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x5, 0x1e}}) (async) 00:22:25 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 00:22:25 executing program 2: socket$bt_rfcomm(0x1f, 0x3, 0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) (async) 00:22:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x9, 0x7, {{0x17, 0x4, 0x3, 0x20, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x31, 0x0, [{0x0, 0x3, 'X'}, {0x1, 0x3, "e0"}, {0x1, 0x8, "f100f4a77c85"}, {0x0, 0x4, "4a8d"}, {0x1, 0x8, "1b66a85f7d4d"}, {0x6, 0x11, "f2ef15a92ed1dd67c03674de65cc8b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x7, "ac141d7d46"}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0x3, 0x35}]}}}}}) 00:22:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x400c002) 00:22:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x5, 0x1e}}) 00:22:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x2) 00:22:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x9, 0x7, {{0x17, 0x4, 0x3, 0x20, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x31, 0x0, [{0x0, 0x3, 'X'}, {0x1, 0x3, "e0"}, {0x1, 0x8, "f100f4a77c85"}, {0x0, 0x4, "4a8d"}, {0x1, 0x8, "1b66a85f7d4d"}, {0x6, 0x11, "f2ef15a92ed1dd67c03674de65cc8b"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x7, "ac141d7d46"}, @cipso={0x86, 0x6, 0x3}, @lsrr={0x83, 0x3, 0x35}]}}}}}) 00:22:25 executing program 2: socket$bt_rfcomm(0x1f, 0x3, 0x3) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) 00:22:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000004ad37e3acf63c6ca0b00", @ANYRES32=0x0, @ANYBLOB="14000700fe8000"/20], 0x30}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x20, 0x7, 0x0, 0x1ff, {{0x7, 0x4, 0x2, 0xd, 0x1c, 0x66, 0x0, 0x8, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008c1) 00:22:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x400c002) 00:22:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2100, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1a}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000843}, 0x40010) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0xc000, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000002c0)={r0, r6, 0x8, 0xc2, &(0x7f00000001c0)="806e5616c10e3a9d2e4375e405ab01c84eccd7120b93c052a4d4f935556d2a20e7d42af0654cc86ad06e810acc539e37ae8ca655047c61a20704bbfb88d24bf0007e8a904025cdfbe825f96e231119d844e039640c5734e55ec297dc700bc8eae7760d34ebb0f4823be8df7f1428309592f3b2dd1505e63b1f052db330a56bdf32e92a7c1fd46fc9af65de3bb6f339e4937d4ad94dcd87f9605584be9cb06ce67f962f1cb0f9708a1976935b3f1340fdf5e7d133a3378d042057d01b95062d7120f7", 0x1, 0x1f, 0x1, 0x401, 0x18, 0x3, 0xffffff00, 'syz0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x20, 0x20, 0xfff, 0x10000, {{0x26, 0x4, 0x0, 0x1, 0x98, 0x64, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4c, 0x9d, 0x1, 0x0, [{@multicast1, 0x5}, {@multicast2, 0x1f}, {@empty, 0x5}, {@multicast2, 0x6}, {@rand_addr=0x7, 0x8}, {@loopback, 0x7}, {@multicast2}, {@local, 0xeee5}, {@broadcast, 0x7f}]}, @noop, @end, @timestamp_addr={0x44, 0x14, 0x2e, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0xfffff3e1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @noop, @noop, @ssrr={0x89, 0x7, 0xfa, [@multicast1]}, @cipso={0x86, 0x18, 0x3, [{0x1, 0xb, "9203bcacbab6f19ae2"}, {0x7, 0x7, "50d80b470e"}]}]}}}}}) 00:22:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x3) 00:22:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, @rand_addr=0x64010101, 0x4, 0x10}}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000004ad37e3acf63c6ca0b00", @ANYRES32=0x0, @ANYBLOB="14000700fe8000"/20], 0x30}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x20, 0x7, 0x0, 0x1ff, {{0x7, 0x4, 0x2, 0xd, 0x1c, 0x66, 0x0, 0x8, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008c1) 00:22:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3f}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x400c002) 00:22:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x4) 00:22:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2100, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1a}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000843}, 0x40010) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0xc000, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000002c0)={r0, r6, 0x8, 0xc2, &(0x7f00000001c0)="806e5616c10e3a9d2e4375e405ab01c84eccd7120b93c052a4d4f935556d2a20e7d42af0654cc86ad06e810acc539e37ae8ca655047c61a20704bbfb88d24bf0007e8a904025cdfbe825f96e231119d844e039640c5734e55ec297dc700bc8eae7760d34ebb0f4823be8df7f1428309592f3b2dd1505e63b1f052db330a56bdf32e92a7c1fd46fc9af65de3bb6f339e4937d4ad94dcd87f9605584be9cb06ce67f962f1cb0f9708a1976935b3f1340fdf5e7d133a3378d042057d01b95062d7120f7", 0x1, 0x1f, 0x1, 0x401, 0x18, 0x3, 0xffffff00, 'syz0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2100, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) (async) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1a}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000843}, 0x40010) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0xc000, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000002c0)={r0, r6, 0x8, 0xc2, &(0x7f00000001c0)="806e5616c10e3a9d2e4375e405ab01c84eccd7120b93c052a4d4f935556d2a20e7d42af0654cc86ad06e810acc539e37ae8ca655047c61a20704bbfb88d24bf0007e8a904025cdfbe825f96e231119d844e039640c5734e55ec297dc700bc8eae7760d34ebb0f4823be8df7f1428309592f3b2dd1505e63b1f052db330a56bdf32e92a7c1fd46fc9af65de3bb6f339e4937d4ad94dcd87f9605584be9cb06ce67f962f1cb0f9708a1976935b3f1340fdf5e7d133a3378d042057d01b95062d7120f7", 0x1, 0x1f, 0x1, 0x401, 0x18, 0x3, 0xffffff00, 'syz0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x8000, 0x4) 00:22:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, @rand_addr=0x64010101, 0x4, 0x10}}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:25 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x20, 0x20, 0xfff, 0x10000, {{0x26, 0x4, 0x0, 0x1, 0x98, 0x64, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4c, 0x9d, 0x1, 0x0, [{@multicast1, 0x5}, {@multicast2, 0x1f}, {@empty, 0x5}, {@multicast2, 0x6}, {@rand_addr=0x7, 0x8}, {@loopback, 0x7}, {@multicast2}, {@local, 0xeee5}, {@broadcast, 0x7f}]}, @noop, @end, @timestamp_addr={0x44, 0x14, 0x2e, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0xfffff3e1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @noop, @noop, @ssrr={0x89, 0x7, 0xfa, [@multicast1]}, @cipso={0x86, 0x18, 0x3, [{0x1, 0xb, "9203bcacbab6f19ae2"}, {0x7, 0x7, "50d80b470e"}]}]}}}}}) 00:22:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x5) 00:22:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x8000, 0x4) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x8000, 0x4) (async) 00:22:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000004ad37e3acf63c6ca0b00", @ANYRES32=0x0, @ANYBLOB="14000700fe8000"/20], 0x30}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x20, 0x7, 0x0, 0x1ff, {{0x7, 0x4, 0x2, 0xd, 0x1c, 0x66, 0x0, 0x8, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008c1) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000004ad37e3acf63c6ca0b00", @ANYRES32=0x0, @ANYBLOB="14000700fe8000"/20], 0x30}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x20, 0x7, 0x0, 0x1ff, {{0x7, 0x4, 0x2, 0xd, 0x1c, 0x66, 0x0, 0x8, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @ra={0x94, 0x4}]}}}}}) (async) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x58, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x200008c1) (async) 00:22:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x6) 00:22:25 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)={'erspan0\x00', 0x0, 0x20, 0x20, 0xfff, 0x10000, {{0x26, 0x4, 0x0, 0x1, 0x98, 0x64, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4c, 0x9d, 0x1, 0x0, [{@multicast1, 0x5}, {@multicast2, 0x1f}, {@empty, 0x5}, {@multicast2, 0x6}, {@rand_addr=0x7, 0x8}, {@loopback, 0x7}, {@multicast2}, {@local, 0xeee5}, {@broadcast, 0x7f}]}, @noop, @end, @timestamp_addr={0x44, 0x14, 0x2e, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0xfffff3e1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @noop, @noop, @ssrr={0x89, 0x7, 0xfa, [@multicast1]}, @cipso={0x86, 0x18, 0x3, [{0x1, 0xb, "9203bcacbab6f19ae2"}, {0x7, 0x7, "50d80b470e"}]}]}}}}}) 00:22:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x2100, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r2) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x1a}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000843}, 0x40010) (async) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0xc000, 0x0) (async) r6 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000002c0)={r0, r6, 0x8, 0xc2, &(0x7f00000001c0)="806e5616c10e3a9d2e4375e405ab01c84eccd7120b93c052a4d4f935556d2a20e7d42af0654cc86ad06e810acc539e37ae8ca655047c61a20704bbfb88d24bf0007e8a904025cdfbe825f96e231119d844e039640c5734e55ec297dc700bc8eae7760d34ebb0f4823be8df7f1428309592f3b2dd1505e63b1f052db330a56bdf32e92a7c1fd46fc9af65de3bb6f339e4937d4ad94dcd87f9605584be9cb06ce67f962f1cb0f9708a1976935b3f1340fdf5e7d133a3378d042057d01b95062d7120f7", 0x1, 0x1f, 0x1, 0x401, 0x18, 0x3, 0xffffff00, 'syz0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@remote, @rand_addr=0x64010101, 0x4, 0x10}}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000000)={'syztnl2\x00', 0x0}) 00:22:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x8000, 0x4) 00:22:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x7) 00:22:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x7f, 0x8001, {{0x10, 0x4, 0x3, 0xa, 0x40, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x23, 0x33, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102, @loopback, @remote, @private=0xa010102, @private=0xa010101]}, @lsrr={0x83, 0x7, 0x29, [@local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, 0x1, 0x0, 0x50, 0x0, [{@dev}, {@local}, {@multicast2}, {@multicast2}, {@dev}]}}) 00:22:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x1, 0x80, 0xfffffff8, 0x1, {{0x5, 0x4, 0x1, 0x22, 0x14, 0x67, 0x0, 0x81, 0x29, 0x0, @multicast1, @multicast2}}}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0040800000000001000000094bbb002c00680000062f9078ac1e0101ac14141e440c38c14e5b584980ae183e940401000707dc7f00000100c21b5d616ecbd3fd896044fa7865704d118d85bc38e98fe7ff6c65ed9ba7017869ae11942086ec2fed4ca2daca2a31e6dc0af1"]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', r1, 0x700, 0x700, 0x3f, 0x30, {{0x19, 0x4, 0x1, 0x5, 0x64, 0x65, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x44, 0x61, 0x3, 0x5, [{@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4}, {@local, 0x2}, {@remote, 0x2}, {@loopback, 0xcf5}, {@multicast2, 0x9}]}, @timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0x2, [{@rand_addr=0x64010101, 0x5}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', r5, 0x1, 0x80, 0x6, 0x6, {{0x2e, 0x4, 0x3, 0x20, 0xb8, 0x64, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @broadcast, {[@end, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x53, [@empty, @multicast2, @multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0x24, 0x4d, 0x3, 0x9, [{@multicast1, 0x4}, {@multicast2, 0x8}, {@remote}, {@loopback, 0xfffff8e9}]}, @timestamp_addr={0x44, 0x1c, 0xc7, 0x1, 0x8, [{@empty, 0xe8}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @noop, @timestamp={0x44, 0x24, 0x16, 0x0, 0x0, [0x3, 0x40, 0x2, 0x7, 0x5f, 0x3, 0xea6a, 0x1]}, @cipso={0x86, 0x27, 0xa515be01ab673386, [{0x5, 0x10, "f0a3a70849a7728b5aa69c702cd8"}, {0x5, 0x11, "092cd7957e4e3243bcd732033d6163"}]}]}}}}}) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:26 executing program 2: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='syztnl2\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf9}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xe0}, 0x20000015) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x7f, 0x8001, {{0x10, 0x4, 0x3, 0xa, 0x40, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x23, 0x33, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102, @loopback, @remote, @private=0xa010102, @private=0xa010101]}, @lsrr={0x83, 0x7, 0x29, [@local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, 0x1, 0x0, 0x50, 0x0, [{@dev}, {@local}, {@multicast2}, {@multicast2}, {@dev}]}}) 00:22:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x9) 00:22:26 executing program 2: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='syztnl2\x00', 0x0, 0xffffffffffffffff) (async) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='syztnl2\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf9}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xe0}, 0x20000015) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x7f, 0x8001, {{0x10, 0x4, 0x3, 0xa, 0x40, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x23, 0x33, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102, @loopback, @remote, @private=0xa010102, @private=0xa010101]}, @lsrr={0x83, 0x7, 0x29, [@local]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, 0x1, 0x0, 0x50, 0x0, [{@dev}, {@local}, {@multicast2}, {@multicast2}, {@dev}]}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x7f, 0x8001, {{0x10, 0x4, 0x3, 0xa, 0x40, 0x66, 0x0, 0x9, 0x4, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0x23, 0x33, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}, @rand_addr=0x64010102, @loopback, @remote, @private=0xa010102, @private=0xa010101]}, @lsrr={0x83, 0x7, 0x29, [@local]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@local, 0x1, 0x0, 0x50, 0x0, [{@dev}, {@local}, {@multicast2}, {@multicast2}, {@dev}]}}) (async) 00:22:26 executing program 2: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='syztnl2\x00', 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf9}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0xe0}, 0x20000015) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x300) 00:22:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x1, 0x80, 0xfffffff8, 0x1, {{0x5, 0x4, 0x1, 0x22, 0x14, 0x67, 0x0, 0x81, 0x29, 0x0, @multicast1, @multicast2}}}}) (async, rerun: 32) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0040800000000001000000094bbb002c00680000062f9078ac1e0101ac14141e440c38c14e5b584980ae183e940401000707dc7f00000100c21b5d616ecbd3fd896044fa7865704d118d85bc38e98fe7ff6c65ed9ba7017869ae11942086ec2fed4ca2daca2a31e6dc0af1"]}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', r1, 0x700, 0x700, 0x3f, 0x30, {{0x19, 0x4, 0x1, 0x5, 0x64, 0x65, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x44, 0x61, 0x3, 0x5, [{@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4}, {@local, 0x2}, {@remote, 0x2}, {@loopback, 0xcf5}, {@multicast2, 0x9}]}, @timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0x2, [{@rand_addr=0x64010101, 0x5}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', r5, 0x1, 0x80, 0x6, 0x6, {{0x2e, 0x4, 0x3, 0x20, 0xb8, 0x64, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @broadcast, {[@end, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x53, [@empty, @multicast2, @multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0x24, 0x4d, 0x3, 0x9, [{@multicast1, 0x4}, {@multicast2, 0x8}, {@remote}, {@loopback, 0xfffff8e9}]}, @timestamp_addr={0x44, 0x1c, 0xc7, 0x1, 0x8, [{@empty, 0xe8}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @noop, @timestamp={0x44, 0x24, 0x16, 0x0, 0x0, [0x3, 0x40, 0x2, 0x7, 0x5f, 0x3, 0xea6a, 0x1]}, @cipso={0x86, 0x27, 0xa515be01ab673386, [{0x5, 0x10, "f0a3a70849a7728b5aa69c702cd8"}, {0x5, 0x11, "092cd7957e4e3243bcd732033d6163"}]}]}}}}}) (async, rerun: 32) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (rerun: 32) 00:22:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 1: clock_gettime(0x5, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:26 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x50, 0x70, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7fffffff}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@private=0xa010101, 0x0, 0x0, 0x50, 0x0, [{@initdev}, {}, {@initdev}, {@empty}, {@private}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x500) 00:22:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80800}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:26 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x50, 0x70, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7fffffff}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x50, 0x70, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7fffffff}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x90) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:26 executing program 1: clock_gettime(0x5, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@private=0xa010101, 0x0, 0x0, 0x50, 0x0, [{@initdev}, {}, {@initdev}, {@empty}, {@private}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x600) 00:22:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}}, 0x4000) 00:22:26 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@private=0xa010101, 0x0, 0x0, 0x50, 0x0, [{@initdev}, {}, {@initdev}, {@empty}, {@private}]}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x1, 0x80, 0xfffffff8, 0x1, {{0x5, 0x4, 0x1, 0x22, 0x14, 0x67, 0x0, 0x81, 0x29, 0x0, @multicast1, @multicast2}}}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0040800000000001000000094bbb002c00680000062f9078ac1e0101ac14141e440c38c14e5b584980ae183e940401000707dc7f00000100c21b5d616ecbd3fd896044fa7865704d118d85bc38e98fe7ff6c65ed9ba7017869ae11942086ec2fed4ca2daca2a31e6dc0af1"]}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', r1, 0x700, 0x700, 0x3f, 0x30, {{0x19, 0x4, 0x1, 0x5, 0x64, 0x65, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x44, 0x61, 0x3, 0x5, [{@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@broadcast, 0x400}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4}, {@local, 0x2}, {@remote, 0x2}, {@loopback, 0xcf5}, {@multicast2, 0x9}]}, @timestamp_prespec={0x44, 0xc, 0x7d, 0x3, 0x2, [{@rand_addr=0x64010101, 0x5}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', r5, 0x1, 0x80, 0x6, 0x6, {{0x2e, 0x4, 0x3, 0x20, 0xb8, 0x64, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @broadcast, {[@end, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0x53, [@empty, @multicast2, @multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0x24, 0x4d, 0x3, 0x9, [{@multicast1, 0x4}, {@multicast2, 0x8}, {@remote}, {@loopback, 0xfffff8e9}]}, @timestamp_addr={0x44, 0x1c, 0xc7, 0x1, 0x8, [{@empty, 0xe8}, {@multicast2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @noop, @timestamp={0x44, 0x24, 0x16, 0x0, 0x0, [0x3, 0x40, 0x2, 0x7, 0x5f, 0x3, 0xea6a, 0x1]}, @cipso={0x86, 0x27, 0xa515be01ab673386, [{0x5, 0x10, "f0a3a70849a7728b5aa69c702cd8"}, {0x5, 0x11, "092cd7957e4e3243bcd732033d6163"}]}]}}}}}) (async) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:26 executing program 1: clock_gettime(0x5, &(0x7f0000000000)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x700) 00:22:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}}, 0x4000) 00:22:26 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_newvlan={0x50, 0x70, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x7fffffff}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x4, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x900) 00:22:26 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x5, 0x7, {{0xf, 0x4, 0x3, 0x1f, 0x3c, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @private=0xa010101, {[@ssrr={0x89, 0x13, 0x7d, [@empty, @multicast1, @multicast2, @multicast2]}, @end, @rr={0x7, 0x13, 0x3d, [@rand_addr=0x64010100, @loopback, @multicast2, @multicast1]}, @noop]}}}}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x1, 0x64) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={r2, 0x9, 0x0, 0x4, 0x2, [], [0x800, 0x800, 0x80, 0x8001], [0x6, 0x9bf, 0x9, 0x101], [0x7, 0xfffffffffffffff7, 0x81, 0x8]}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0xa4401, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x8, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000580)={r1, r6, r2, 0x20, 0x4, 0x8, 0x8, 0x0, 0x7, 0x3, 0x5b44, 0xee78}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, r1, r2, 0x0, 0x0, 0x4123, &(0x7f0000000300)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000380)={0x0, r7, r2, 0x500000, 0x6, 0x10001, 0x80000001, 0x0, 0x800, 0xffffffff, 0x8000, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000140)={0x0, r1, r2, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r11, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x30}}, 0x0) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r11, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r8, 0x20, &(0x7f0000000280)={&(0x7f00000001c0)=""/58, 0x3a, 0x0, &(0x7f0000000200)=""/104, 0x68}}, 0x10) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x8906, 0x0) 00:22:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x801) 00:22:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}}, 0x4000) 00:22:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x2792) 00:22:26 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x5, 0x7, {{0xf, 0x4, 0x3, 0x1f, 0x3c, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @private=0xa010101, {[@ssrr={0x89, 0x13, 0x7d, [@empty, @multicast1, @multicast2, @multicast2]}, @end, @rr={0x7, 0x13, 0x3d, [@rand_addr=0x64010100, @loopback, @multicast2, @multicast1]}, @noop]}}}}}) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 00:22:26 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x1, 0x64) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={r2, 0x9, 0x0, 0x4, 0x2, [], [0x800, 0x800, 0x80, 0x8001], [0x6, 0x9bf, 0x9, 0x101], [0x7, 0xfffffffffffffff7, 0x81, 0x8]}) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0xa4401, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x8, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000580)={r1, r6, r2, 0x20, 0x4, 0x8, 0x8, 0x0, 0x7, 0x3, 0x5b44, 0xee78}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, r1, r2, 0x0, 0x0, 0x4123, &(0x7f0000000300)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000380)={0x0, r7, r2, 0x500000, 0x6, 0x10001, 0x80000001, 0x0, 0x800, 0xffffffff, 0x8000, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000140)={0x0, r1, r2, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) (async) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r11, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x30}}, 0x0) (async) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r11, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r8, 0x20, &(0x7f0000000280)={&(0x7f00000001c0)=""/58, 0x3a, 0x0, &(0x7f0000000200)=""/104, 0x68}}, 0x10) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x8906, 0x0) 00:22:26 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x801) 00:22:26 executing program 0: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x4) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40001) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) 00:22:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x4000) 00:22:26 executing program 4: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x5, 0x7, {{0xf, 0x4, 0x3, 0x1f, 0x3c, 0x64, 0x0, 0x7, 0x29, 0x0, @remote, @private=0xa010101, {[@ssrr={0x89, 0x13, 0x7d, [@empty, @multicast1, @multicast2, @multicast2]}, @end, @rr={0x7, 0x13, 0x3d, [@rand_addr=0x64010100, @loopback, @multicast2, @multicast1]}, @noop]}}}}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 0: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) socket$inet_udp(0x2, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40001) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) 00:22:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000050}, 0x801) 00:22:26 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x1, 0x64) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000080)={r2, 0x9, 0x0, 0x4, 0x2, [], [0x800, 0x800, 0x80, 0x8001], [0x6, 0x9bf, 0x9, 0x101], [0x7, 0xfffffffffffffff7, 0x81, 0x8]}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0xa4401, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x8, 0x7, 0x8}) ioctl$DRM_IOCTL_MODE_SETPLANE(r5, 0xc03064b7, &(0x7f0000000580)={r1, r6, r2, 0x20, 0x4, 0x8, 0x8, 0x0, 0x7, 0x3, 0x5b44, 0xee78}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, r1, r2, 0x0, 0x0, 0x4123, &(0x7f0000000300)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000380)={0x0, r7, r2, 0x500000, 0x6, 0x10001, 0x80000001, 0x0, 0x800, 0xffffffff, 0x8000, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000140)={0x0, r1, r2, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r11, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x30}}, 0x0) (async) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r11, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r8, 0x20, &(0x7f0000000280)={&(0x7f00000001c0)=""/58, 0x3a, 0x0, &(0x7f0000000200)=""/104, 0x68}}, 0x10) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r12, 0x8906, 0x0) 00:22:26 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 00:22:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x9227) 00:22:26 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\x00', 0x0, r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f0000000180)={'gre0\x00', 0x0}) 00:22:26 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) 00:22:26 executing program 0: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x4) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40001) (async, rerun: 64) accept4$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) (rerun: 64) 00:22:26 executing program 2: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) inotify_init1(0x80800) 00:22:26 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\x00', 0x0, r1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f0000000180)={'gre0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f0000000180)={'gre0\x00', 0x0}) 00:22:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x7800, 0x10000, 0x101, {{0xb, 0x4, 0x3, 0x38, 0x2c, 0x64, 0x0, 0x8, 0x0, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x17, 0xd3, [@rand_addr=0x64010100, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x34000) 00:22:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="3053836d642875390febb24b777fff49b7c0db1dfb0d82f7d93d84d1d08d8dbaf14a2d412d772655685f42c7526a3afde984af6c97da3c0989a139aebd5899f0640fda39a59f74aedce9827367570f92bfc872fd7898c5fe89415402c60b1403118759f9df23e250ee8f516925b24ca07729f270804e6ecc77eb28c39ab2bddc4c61ef4c94ce8e15215380847270f5a9efa871ceb01a256da681de3385da59abfe9444b5a0c1c14d998f2f01d824e4516f631620fe0f58321c86250a52ad52c92c6754593f62ca598b7dd65a3a1cfccffe21296f2cf56305ca27ffb2e6", &(0x7f0000000100)=@tcp6=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:26 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) r1 = socket$inet(0x2, 0x800, 0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8901, &(0x7f0000000000)={'gre0\x00', 0x0}) 00:22:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x400300) 00:22:26 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='\x00', 0x0, r1) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8902, &(0x7f0000000180)={'gre0\x00', 0x0}) 00:22:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x7800, 0x10000, 0x101, {{0xb, 0x4, 0x3, 0x38, 0x2c, 0x64, 0x0, 0x8, 0x0, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x17, 0xd3, [@rand_addr=0x64010100, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:26 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="3053836d642875390febb24b777fff49b7c0db1dfb0d82f7d93d84d1d08d8dbaf14a2d412d772655685f42c7526a3afde984af6c97da3c0989a139aebd5899f0640fda39a59f74aedce9827367570f92bfc872fd7898c5fe89415402c60b1403118759f9df23e250ee8f516925b24ca07729f270804e6ecc77eb28c39ab2bddc4c61ef4c94ce8e15215380847270f5a9efa871ceb01a256da681de3385da59abfe9444b5a0c1c14d998f2f01d824e4516f631620fe0f58321c86250a52ad52c92c6754593f62ca598b7dd65a3a1cfccffe21296f2cf56305ca27ffb2e6", &(0x7f0000000100)=@tcp6=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="3053836d642875390febb24b777fff49b7c0db1dfb0d82f7d93d84d1d08d8dbaf14a2d412d772655685f42c7526a3afde984af6c97da3c0989a139aebd5899f0640fda39a59f74aedce9827367570f92bfc872fd7898c5fe89415402c60b1403118759f9df23e250ee8f516925b24ca07729f270804e6ecc77eb28c39ab2bddc4c61ef4c94ce8e15215380847270f5a9efa871ceb01a256da681de3385da59abfe9444b5a0c1c14d998f2f01d824e4516f631620fe0f58321c86250a52ad52c92c6754593f62ca598b7dd65a3a1cfccffe21296f2cf56305ca27ffb2e6", &(0x7f0000000100)=@tcp6=r1}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:27 executing program 2: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) fsmount(r1, 0x0, 0x8) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) (async) inotify_init1(0x80800) 00:22:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x7800, 0x10000, 0x101, {{0xb, 0x4, 0x3, 0x38, 0x2c, 0x64, 0x0, 0x8, 0x0, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x17, 0xd3, [@rand_addr=0x64010100, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0x70) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x7800, 0x7800, 0x10000, 0x101, {{0xb, 0x4, 0x3, 0x38, 0x2c, 0x64, 0x0, 0x8, 0x0, 0x0, @loopback, @private=0xa010101, {[@rr={0x7, 0x17, 0xd3, [@rand_addr=0x64010100, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x40}, @multicast1]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) 00:22:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x1000000) 00:22:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="3053836d642875390febb24b777fff49b7c0db1dfb0d82f7d93d84d1d08d8dbaf14a2d412d772655685f42c7526a3afde984af6c97da3c0989a139aebd5899f0640fda39a59f74aedce9827367570f92bfc872fd7898c5fe89415402c60b1403118759f9df23e250ee8f516925b24ca07729f270804e6ecc77eb28c39ab2bddc4c61ef4c94ce8e15215380847270f5a9efa871ceb01a256da681de3385da59abfe9444b5a0c1c14d998f2f01d824e4516f631620fe0f58321c86250a52ad52c92c6754593f62ca598b7dd65a3a1cfccffe21296f2cf56305ca27ffb2e6", &(0x7f0000000100)=@tcp6=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0x1, &(0x7f0000000000)="3053836d642875390febb24b777fff49b7c0db1dfb0d82f7d93d84d1d08d8dbaf14a2d412d772655685f42c7526a3afde984af6c97da3c0989a139aebd5899f0640fda39a59f74aedce9827367570f92bfc872fd7898c5fe89415402c60b1403118759f9df23e250ee8f516925b24ca07729f270804e6ecc77eb28c39ab2bddc4c61ef4c94ce8e15215380847270f5a9efa871ceb01a256da681de3385da59abfe9444b5a0c1c14d998f2f01d824e4516f631620fe0f58321c86250a52ad52c92c6754593f62ca598b7dd65a3a1cfccffe21296f2cf56305ca27ffb2e6", &(0x7f0000000100)=@tcp6=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:27 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x80, 0x0, [{@broadcast}, {@multicast2}, {@multicast1}, {@empty}, {@local}, {@loopback}, {@multicast1}, {@loopback}]}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x77777777}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000200)=[0x0, r8, r7, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000340)=r5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x8902, &(0x7f0000000140)={'gretap0\x00', 0x0}) 00:22:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x2e0, 0x0, {{0x1c, 0x4, 0x1, 0x0, 0x70, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x4c, 0x32, 0x1, 0x3, [{@multicast2, 0x5}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xffffffff}, {@private=0xa010100, 0x8}, {@multicast2, 0x7fff}, {@multicast1, 0x4}, {@private=0xa010102, 0x4}, {@private=0xa010100, 0x4cf3}]}, @generic={0x44, 0xf, "91d15b9842478cb55b2dfcddb5"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', r2, 0x10, 0x8000, 0xd11, 0x1, {{0x10, 0x4, 0x3, 0x12, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x24, 0x0, 0x7, [0x8001, 0x0, 0x2, 0xffff, 0x30ce, 0x0]}, @rr={0x7, 0xf, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}]}}}}}) 00:22:27 executing program 2: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) inotify_init1(0x80800) (async) inotify_init1(0x80800) 00:22:27 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) r1 = socket$inet(0x2, 0x800, 0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8901, &(0x7f0000000000)={'gre0\x00', 0x0}) 00:22:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x2000000) 00:22:27 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x80, 0x0, [{@broadcast}, {@multicast2}, {@multicast1}, {@empty}, {@local}, {@loopback}, {@multicast1}, {@loopback}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x80, 0x0, [{@broadcast}, {@multicast2}, {@multicast1}, {@empty}, {@local}, {@loopback}, {@multicast1}, {@loopback}]}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x77777777}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x77777777}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000200)=[0x0, r8, r7, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000340)=r5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x8902, &(0x7f0000000140)={'gretap0\x00', 0x0}) 00:22:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x10, 0x1, 0x2, 0x4, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x68, 0x0, 0x1, 0x4, 0x0, @local, @multicast1, {[@noop]}}}}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x3, 0x6, 0x22, r2, 0x5, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r2, r3, 0x11, 0x0, @void}, 0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000480)={0x3, r3, 0x80000}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000540)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x7800, 0x80, 0x7fffffff, 0x7b, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x66, 0x0, 0x3f, 0x29, 0x0, @loopback, @empty, {[@ssrr={0x89, 0xf, 0xd1, [@loopback, @broadcast, @empty]}, @generic={0x89, 0xd, "e25b7b37e6376197d236a1"}, @end, @noop, @timestamp_addr={0x44, 0x14, 0x6f, 0x1, 0x8, [{@empty, 0x8001}, {@private=0xa010102}]}, @end, @timestamp_prespec={0x44, 0xc, 0x84, 0x3, 0xf, [{@multicast1, 0xdc79}]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x4e}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x50}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xef, &(0x7f00000001c0)=""/239, 0x1e00, 0xa, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x7, 0x0, 0x5}, 0x10, 0x78be, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0x1, r4, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x0, 0x2, 0x1, 0xc}], 0x10, 0x5}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x2e0, 0x0, {{0x1c, 0x4, 0x1, 0x0, 0x70, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x4c, 0x32, 0x1, 0x3, [{@multicast2, 0x5}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xffffffff}, {@private=0xa010100, 0x8}, {@multicast2, 0x7fff}, {@multicast1, 0x4}, {@private=0xa010102, 0x4}, {@private=0xa010100, 0x4cf3}]}, @generic={0x44, 0xf, "91d15b9842478cb55b2dfcddb5"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', r2, 0x10, 0x8000, 0xd11, 0x1, {{0x10, 0x4, 0x3, 0x12, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x24, 0x0, 0x7, [0x8001, 0x0, 0x2, 0xffff, 0x30ce, 0x0]}, @rr={0x7, 0xf, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}]}}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x2e0, 0x0, {{0x1c, 0x4, 0x1, 0x0, 0x70, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x4c, 0x32, 0x1, 0x3, [{@multicast2, 0x5}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xffffffff}, {@private=0xa010100, 0x8}, {@multicast2, 0x7fff}, {@multicast1, 0x4}, {@private=0xa010102, 0x4}, {@private=0xa010100, 0x4cf3}]}, @generic={0x44, 0xf, "91d15b9842478cb55b2dfcddb5"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', r2, 0x10, 0x8000, 0xd11, 0x1, {{0x10, 0x4, 0x3, 0x12, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x24, 0x0, 0x7, [0x8001, 0x0, 0x2, 0xffff, 0x30ce, 0x0]}, @rr={0x7, 0xf, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}]}}}}}) (async) 00:22:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'gre0\x00', 0x0}) 00:22:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x3000000) 00:22:27 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x80, 0x0, [{@broadcast}, {@multicast2}, {@multicast1}, {@empty}, {@local}, {@loopback}, {@multicast1}, {@loopback}]}}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x77777777}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000200)=[0x0, r8, r7, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000340)=r5) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x8902, &(0x7f0000000140)={'gretap0\x00', 0x0}) 00:22:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x4000000) 00:22:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'gre0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'gre0\x00', 0x0}) (async) 00:22:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x2e0, 0x0, {{0x1c, 0x4, 0x1, 0x0, 0x70, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x4c, 0x32, 0x1, 0x3, [{@multicast2, 0x5}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xffffffff}, {@private=0xa010100, 0x8}, {@multicast2, 0x7fff}, {@multicast1, 0x4}, {@private=0xa010102, 0x4}, {@private=0xa010100, 0x4cf3}]}, @generic={0x44, 0xf, "91d15b9842478cb55b2dfcddb5"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', r2, 0x10, 0x8000, 0xd11, 0x1, {{0x10, 0x4, 0x3, 0x12, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x24, 0x0, 0x7, [0x8001, 0x0, 0x2, 0xffff, 0x30ce, 0x0]}, @rr={0x7, 0xf, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', r2, 0x10, 0x8000, 0xd11, 0x1, {{0x10, 0x4, 0x3, 0x12, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x24, 0x0, 0x7, [0x8001, 0x0, 0x2, 0xffff, 0x30ce, 0x0]}, @rr={0x7, 0xf, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}]}}}}}) 00:22:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/161, &(0x7f00000000c0)=0xa1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:27 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}) (async) r1 = socket$inet(0x2, 0x800, 0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8901, &(0x7f0000000000)={'gre0\x00', 0x0}) 00:22:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/161, &(0x7f00000000c0)=0xa1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x5000000) 00:22:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x10, 0x1, 0x2, 0x4, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x68, 0x0, 0x1, 0x4, 0x0, @local, @multicast1, {[@noop]}}}}}) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x3, 0x6, 0x22, r2, 0x5, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r2, r3, 0x11, 0x0, @void}, 0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000480)={0x3, r3, 0x80000}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000540)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x7800, 0x80, 0x7fffffff, 0x7b, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x66, 0x0, 0x3f, 0x29, 0x0, @loopback, @empty, {[@ssrr={0x89, 0xf, 0xd1, [@loopback, @broadcast, @empty]}, @generic={0x89, 0xd, "e25b7b37e6376197d236a1"}, @end, @noop, @timestamp_addr={0x44, 0x14, 0x6f, 0x1, 0x8, [{@empty, 0x8001}, {@private=0xa010102}]}, @end, @timestamp_prespec={0x44, 0xc, 0x84, 0x3, 0xf, [{@multicast1, 0xdc79}]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x4e}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x50}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xef, &(0x7f00000001c0)=""/239, 0x1e00, 0xa, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x7, 0x0, 0x5}, 0x10, 0x78be, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0x1, r4, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x0, 0x2, 0x1, 0xc}], 0x10, 0x5}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'gre0\x00', 0x0}) 00:22:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@multicast2}]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6772657461703000000000000000000204190a25b58a208ac31271b7aa34cf6c51d89918c00a9a6c04f85f6cbb73cf16137526db2d5e5c4dfcc27c7292a7a114205ee04ce358f1edfbb6c176757da2", @ANYRES32=0x0, @ANYBLOB="00400040000000090000007f4404005000640000f7049078e0000002e0000002443c96610a01010200000401ac1414aa00000002ac1414aa00000013ac1e0001000000047f00000100000006ac1414360000000364010102000000ff"]}) 00:22:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000000)=""/161, &(0x7f00000000c0)=0xa1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:27 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) sync() ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x1, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, r0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x3, r1, 0x80000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8901, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 00:22:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x12200, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000000c0)={0x1, r2, 0x2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl0\x00', 0x0}) 00:22:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x6000000) 00:22:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10000008) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x44043) 00:22:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x10, 0x1, 0x2, 0x4, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x68, 0x0, 0x1, 0x4, 0x0, @local, @multicast1, {[@noop]}}}}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x3, 0x6, 0x22, r2, 0x5, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r2, r3, 0x11, 0x0, @void}, 0x10) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000480)={0x3, r3, 0x80000}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000540)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x7800, 0x80, 0x7fffffff, 0x7b, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x66, 0x0, 0x3f, 0x29, 0x0, @loopback, @empty, {[@ssrr={0x89, 0xf, 0xd1, [@loopback, @broadcast, @empty]}, @generic={0x89, 0xd, "e25b7b37e6376197d236a1"}, @end, @noop, @timestamp_addr={0x44, 0x14, 0x6f, 0x1, 0x8, [{@empty, 0x8001}, {@private=0xa010102}]}, @end, @timestamp_prespec={0x44, 0xc, 0x84, 0x3, 0xf, [{@multicast1, 0xdc79}]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x4e}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x50}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xef, &(0x7f00000001c0)=""/239, 0x1e00, 0xa, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x7, 0x0, 0x5}, 0x10, 0x78be, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0x1, r4, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x0, 0x2, 0x1, 0xc}], 0x10, 0x5}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x10, 0x1, 0x2, 0x4, {{0x6, 0x4, 0x3, 0x6, 0x18, 0x68, 0x0, 0x1, 0x4, 0x0, @local, @multicast1, {[@noop]}}}}}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0x4, 0x3, 0x6, 0x22, r2, 0x5, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x48) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r2, r3, 0x11, 0x0, @void}, 0x10) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000480)={0x3, r3, 0x80000}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000540)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', r1, 0x7800, 0x80, 0x7fffffff, 0x7b, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x66, 0x0, 0x3f, 0x29, 0x0, @loopback, @empty, {[@ssrr={0x89, 0xf, 0xd1, [@loopback, @broadcast, @empty]}, @generic={0x89, 0xd, "e25b7b37e6376197d236a1"}, @end, @noop, @timestamp_addr={0x44, 0x14, 0x6f, 0x1, 0x8, [{@empty, 0x8001}, {@private=0xa010102}]}, @end, @timestamp_prespec={0x44, 0xc, 0x84, 0x3, 0xf, [{@multicast1, 0xdc79}]}]}}}}}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x4e}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x50}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xef, &(0x7f00000001c0)=""/239, 0x1e00, 0xa, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000140)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x7, 0x0, 0x5}, 0x10, 0x78be, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0x1, r4, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x0, 0x2, 0x1, 0xc}], 0x10, 0x5}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:27 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) sync() ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x1, 0x0, 0xeeeeeeee}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x1, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, r0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x3, r1, 0x80000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8901, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 00:22:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@multicast2}]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6772657461703000000000000000000204190a25b58a208ac31271b7aa34cf6c51d89918c00a9a6c04f85f6cbb73cf16137526db2d5e5c4dfcc27c7292a7a114205ee04ce358f1edfbb6c176757da2", @ANYRES32=0x0, @ANYBLOB="00400040000000090000007f4404005000640000f7049078e0000002e0000002443c96610a01010200000401ac1414aa00000002ac1414aa00000013ac1e0001000000047f00000100000006ac1414360000000364010102000000ff"]}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@multicast2}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6772657461703000000000000000000204190a25b58a208ac31271b7aa34cf6c51d89918c00a9a6c04f85f6cbb73cf16137526db2d5e5c4dfcc27c7292a7a114205ee04ce358f1edfbb6c176757da2", @ANYRES32=0x0, @ANYBLOB="00400040000000090000007f4404005000640000f7049078e0000002e0000002443c96610a01010200000401ac1414aa00000002ac1414aa00000013ac1e0001000000047f00000100000006ac1414360000000364010102000000ff"]}) (async) 00:22:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x12200, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000000c0)={0x1, r2, 0x2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl0\x00', 0x0}) 00:22:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x7000000) 00:22:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@multicast2}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6772657461703000000000000000000204190a25b58a208ac31271b7aa34cf6c51d89918c00a9a6c04f85f6cbb73cf16137526db2d5e5c4dfcc27c7292a7a114205ee04ce358f1edfbb6c176757da2", @ANYRES32=0x0, @ANYBLOB="00400040000000090000007f4404005000640000f7049078e0000002e0000002443c96610a01010200000401ac1414aa00000002ac1414aa00000013ac1e0001000000047f00000100000006ac1414360000000364010102000000ff"]}) 00:22:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10000008) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x44043) 00:22:27 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) (async) sync() (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0], 0x1, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, r0, 0x0, 0x0, 0x0], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0x3, r1, 0x80000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8901, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 00:22:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x12200, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000000c0)={0x1, r2, 0x2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x12200, 0x0) (async) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000000c0)={0x1, r2, 0x2}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl0\x00', 0x0}) (async) 00:22:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x9000000) 00:22:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10000008) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x44043) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x1}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x10000008) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8902, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x44043) (async) 00:22:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0xe7, 0x7f, {{0x1e, 0x4, 0x0, 0x2e, 0x78, 0x66, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x3c, 0xb8, 0x1, 0x6, [{@empty, 0xfff}, {@private=0xa010101, 0x3}, {@multicast1, 0x4}, {@multicast1, 0x80}, {@rand_addr=0x64010101, 0x1}, {@empty, 0x4}, {@remote, 0x10000}]}, @noop, @ssrr={0x89, 0x1b, 0xfc, [@dev={0xac, 0x14, 0x14, 0x37}, @multicast1, @broadcast, @private=0xa010102, @loopback, @private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x6d, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}]}]}}}}}) 00:22:27 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008001}, 0x40008c2) 00:22:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x40000000) 00:22:27 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x7000000) 00:22:27 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) 00:22:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:27 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008001}, 0x40008c2) 00:22:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x92270000) 00:22:27 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) 00:22:27 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8906, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xf8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008001}, 0x40008c2) 00:22:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@multicast2}]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6772657461703000000000000000000204190a25b58a208ac31271b7aa34cf6c51d89918c00a9a6c04f85f6cbb73cf16137526db2d5e5c4dfcc27c7292a7a114205ee04ce358f1edfbb6c176757da2", @ANYRES32=0x0, @ANYBLOB="00400040000000090000007f4404005000640000f7049078e0000002e0000002443c96610a01010200000401ac1414aa00000002ac1414aa00000013ac1e0001000000047f00000100000006ac1414360000000364010102000000ff"]}) 00:22:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0xe7, 0x7f, {{0x1e, 0x4, 0x0, 0x2e, 0x78, 0x66, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x3c, 0xb8, 0x1, 0x6, [{@empty, 0xfff}, {@private=0xa010101, 0x3}, {@multicast1, 0x4}, {@multicast1, 0x80}, {@rand_addr=0x64010101, 0x1}, {@empty, 0x4}, {@remote, 0x10000}]}, @noop, @ssrr={0x89, 0x1b, 0xfc, [@dev={0xac, 0x14, 0x14, 0x37}, @multicast1, @broadcast, @private=0xa010102, @loopback, @private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x6d, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}]}]}}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0xe7, 0x7f, {{0x1e, 0x4, 0x0, 0x2e, 0x78, 0x66, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x3c, 0xb8, 0x1, 0x6, [{@empty, 0xfff}, {@private=0xa010101, 0x3}, {@multicast1, 0x4}, {@multicast1, 0x80}, {@rand_addr=0x64010101, 0x1}, {@empty, 0x4}, {@remote, 0x10000}]}, @noop, @ssrr={0x89, 0x1b, 0xfc, [@dev={0xac, 0x14, 0x14, 0x37}, @multicast1, @broadcast, @private=0xa010102, @loopback, @private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x6d, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}]}]}}}}}) (async) 00:22:27 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0xf0ffffff) 00:22:28 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) 00:22:28 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000060}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getrule={0x14, 0x22, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x480c1}, 0x20000000) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) 00:22:28 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@multicast2}]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6772657461703000000000000000000204190a25b58a208ac31271b7aa34cf6c51d89918c00a9a6c04f85f6cbb73cf16137526db2d5e5c4dfcc27c7292a7a114205ee04ce358f1edfbb6c176757da2", @ANYRES32=0x0, @ANYBLOB="00400040000000090000007f4404005000640000f7049078e0000002e0000002443c96610a01010200000401ac1414aa00000002ac1414aa00000013ac1e0001000000047f00000100000006ac1414360000000364010102000000ff"]}) 00:22:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x738, 0x1a8, 0x2a0, 0x2a0, 0x3a8, 0xc0, 0x6a0, 0x6a0, 0x6a0, 0x6a0, 0x6a0, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x1}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x5, @multicast2, 0x4e23}}}, {{@ip={@remote, @multicast2, 0xff, 0xff0000ff, 'nicvf0\x00', 'vxcan1\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0xc0, 0x200}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3f, 0x80, @multicast2, 0x4e23}}}, {{@ip={@local, @loopback, 0xffffff00, 0xffffff00, 'vlan1\x00', 'nr0\x00', {0xff}, {}, 0x4, 0x2, 0x6}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@broadcast, 0x1}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x2, @ipv4=@empty, 0x4e20}}}, {{@uncond, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@addrtype={{0x30}, {0xc01, 0x48cceec0a8bae9a8, 0x1, 0x1}}, @common=@unspec=@bpf0={{0x230}, {0x3d, [{0x67, 0x9, 0x1, 0x5}, {0x8, 0x7f, 0x1, 0x1}, {0xfff, 0x54, 0x0, 0x800}, {0x4, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x6, 0x2}, {0x2, 0x4, 0x6}, {0x3, 0x4, 0x3, 0x45bc}, {0x20, 0x6, 0xd3, 0x2}, {0x4, 0xf1, 0x8, 0x3f}, {0xfff7, 0x40, 0xff, 0x1}, {0x5, 0x7, 0x1, 0x9}, {0x6, 0xff, 0x2, 0x9}, {0x6bf, 0x2, 0x8, 0x7}, {0x7f, 0xad, 0x7e, 0x5}, {0x4, 0x0, 0x3f, 0xffffffff}, {0x9, 0xfd, 0x20, 0x4}, {0x7, 0x2, 0x20, 0xff}, {0x3, 0x8b, 0x6, 0x2}, {0xdb, 0xf9, 0x7, 0x972}, {0x2, 0x9, 0x8, 0x8001}, {0x5, 0x0, 0x2, 0xfff}, {0x6, 0xcd, 0x1, 0x1ff}, {0xefd, 0x1, 0xd0, 0xffff}, {0x0, 0x1, 0x5, 0x40}, {0x3f, 0x7, 0x8, 0x10000}, {0x1000, 0x6c, 0x0, 0x6}, {0x9, 0x1f, 0x5, 0x4}, {0x9486, 0x6, 0x9, 0x216}, {0x733, 0x1, 0x4, 0x2c6}, {0x6, 0x3, 0x0, 0x9}, {0x8, 0x4, 0xb7, 0x10000}, {0x9, 0x40, 0x80, 0x9}, {0x81, 0x3, 0x1, 0x10001}, {0x7f, 0x7, 0x7, 0x3}, {0x101, 0x1, 0x7f, 0x6}, {0x100, 0x8, 0x7e, 0xe0b}, {0x9, 0x0, 0x5, 0x4}, {0x2, 0x7, 0xff, 0x6}, {0x3, 0x7, 0x80, 0xe23c}, {0x1000, 0x0, 0x7f, 0x1}, {0xfff, 0x6, 0x7, 0x4}, {0x3, 0x20, 0x7, 0x80}, {0x101, 0x1f, 0x5}, {0x8, 0x6, 0x5, 0x3}, {0x1, 0x6, 0x80, 0x1ff}, {0x9b5, 0x6, 0x12, 0x668}, {0x7, 0x2, 0x1, 0x1084bad0}, {0xf9b4, 0x7f, 0x5, 0x1}, {0x4, 0x0, 0x1f, 0x4}, {0x294, 0x4, 0x4, 0xe0}, {0x81, 0xf0, 0x7, 0x6e}, {0x20, 0xd8, 0xa8, 0x4000}, {0x3, 0x1, 0x0, 0x6}, {0x7, 0x6, 0xfe, 0xc52}, {0x2, 0x8, 0x6, 0x20}, {0xa820, 0x9f, 0x60, 0x8}, {0x7f, 0x0, 0x4, 0x7}, {0x8, 0x42, 0xbe, 0x6}, {0x1, 0x14, 0x5, 0x14}, {0x4, 0x3, 0x7f, 0x4}, {0x1, 0x19, 0x6, 0x5fa}, {0x20, 0x6, 0x40, 0x9}, {0x9, 0xf8, 0x20, 0x3ff}, {0x3, 0x4, 0xff, 0x99a}], {0xffffffffffffffff}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x798) 00:22:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0xffffff7f) 00:22:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0xe7, 0x7f, {{0x1e, 0x4, 0x0, 0x2e, 0x78, 0x66, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x3c, 0xb8, 0x1, 0x6, [{@empty, 0xfff}, {@private=0xa010101, 0x3}, {@multicast1, 0x4}, {@multicast1, 0x80}, {@rand_addr=0x64010101, 0x1}, {@empty, 0x4}, {@remote, 0x10000}]}, @noop, @ssrr={0x89, 0x1b, 0xfc, [@dev={0xac, 0x14, 0x14, 0x37}, @multicast1, @broadcast, @private=0xa010102, @loopback, @private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x6d, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}]}]}}}}}) 00:22:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@multicast2}]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="6772657461703000000000000000000204190a25b58a208ac31271b7aa34cf6c51d89918c00a9a6c04f85f6cbb73cf16137526db2d5e5c4dfcc27c7292a7a114205ee04ce358f1edfbb6c176757da2", @ANYRES32=0x0, @ANYBLOB="00400040000000090000007f4404005000640000f7049078e0000002e0000002443c96610a01010200000401ac1414aa00000002ac1414aa00000013ac1e0001000000047f00000100000006ac1414360000000364010102000000ff"]}) 00:22:28 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000060}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getrule={0x14, 0x22, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x480c1}, 0x20000000) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) 00:22:28 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 32) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) [ 1348.162074][T20171] x_tables: duplicate underflow at hook 1 00:22:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x738, 0x1a8, 0x2a0, 0x2a0, 0x3a8, 0xc0, 0x6a0, 0x6a0, 0x6a0, 0x6a0, 0x6a0, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x1}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x5, @multicast2, 0x4e23}}}, {{@ip={@remote, @multicast2, 0xff, 0xff0000ff, 'nicvf0\x00', 'vxcan1\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0xc0, 0x200}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3f, 0x80, @multicast2, 0x4e23}}}, {{@ip={@local, @loopback, 0xffffff00, 0xffffff00, 'vlan1\x00', 'nr0\x00', {0xff}, {}, 0x4, 0x2, 0x6}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@broadcast, 0x1}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x2, @ipv4=@empty, 0x4e20}}}, {{@uncond, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@addrtype={{0x30}, {0xc01, 0x48cceec0a8bae9a8, 0x1, 0x1}}, @common=@unspec=@bpf0={{0x230}, {0x3d, [{0x67, 0x9, 0x1, 0x5}, {0x8, 0x7f, 0x1, 0x1}, {0xfff, 0x54, 0x0, 0x800}, {0x4, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x6, 0x2}, {0x2, 0x4, 0x6}, {0x3, 0x4, 0x3, 0x45bc}, {0x20, 0x6, 0xd3, 0x2}, {0x4, 0xf1, 0x8, 0x3f}, {0xfff7, 0x40, 0xff, 0x1}, {0x5, 0x7, 0x1, 0x9}, {0x6, 0xff, 0x2, 0x9}, {0x6bf, 0x2, 0x8, 0x7}, {0x7f, 0xad, 0x7e, 0x5}, {0x4, 0x0, 0x3f, 0xffffffff}, {0x9, 0xfd, 0x20, 0x4}, {0x7, 0x2, 0x20, 0xff}, {0x3, 0x8b, 0x6, 0x2}, {0xdb, 0xf9, 0x7, 0x972}, {0x2, 0x9, 0x8, 0x8001}, {0x5, 0x0, 0x2, 0xfff}, {0x6, 0xcd, 0x1, 0x1ff}, {0xefd, 0x1, 0xd0, 0xffff}, {0x0, 0x1, 0x5, 0x40}, {0x3f, 0x7, 0x8, 0x10000}, {0x1000, 0x6c, 0x0, 0x6}, {0x9, 0x1f, 0x5, 0x4}, {0x9486, 0x6, 0x9, 0x216}, {0x733, 0x1, 0x4, 0x2c6}, {0x6, 0x3, 0x0, 0x9}, {0x8, 0x4, 0xb7, 0x10000}, {0x9, 0x40, 0x80, 0x9}, {0x81, 0x3, 0x1, 0x10001}, {0x7f, 0x7, 0x7, 0x3}, {0x101, 0x1, 0x7f, 0x6}, {0x100, 0x8, 0x7e, 0xe0b}, {0x9, 0x0, 0x5, 0x4}, {0x2, 0x7, 0xff, 0x6}, {0x3, 0x7, 0x80, 0xe23c}, {0x1000, 0x0, 0x7f, 0x1}, {0xfff, 0x6, 0x7, 0x4}, {0x3, 0x20, 0x7, 0x80}, {0x101, 0x1f, 0x5}, {0x8, 0x6, 0x5, 0x3}, {0x1, 0x6, 0x80, 0x1ff}, {0x9b5, 0x6, 0x12, 0x668}, {0x7, 0x2, 0x1, 0x1084bad0}, {0xf9b4, 0x7f, 0x5, 0x1}, {0x4, 0x0, 0x1f, 0x4}, {0x294, 0x4, 0x4, 0xe0}, {0x81, 0xf0, 0x7, 0x6e}, {0x20, 0xd8, 0xa8, 0x4000}, {0x3, 0x1, 0x0, 0x6}, {0x7, 0x6, 0xfe, 0xc52}, {0x2, 0x8, 0x6, 0x20}, {0xa820, 0x9f, 0x60, 0x8}, {0x7f, 0x0, 0x4, 0x7}, {0x8, 0x42, 0xbe, 0x6}, {0x1, 0x14, 0x5, 0x14}, {0x4, 0x3, 0x7f, 0x4}, {0x1, 0x19, 0x6, 0x5fa}, {0x20, 0x6, 0x40, 0x9}, {0x9, 0xf8, 0x20, 0x3ff}, {0x3, 0x4, 0xff, 0x99a}], {0xffffffffffffffff}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x798) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x738, 0x1a8, 0x2a0, 0x2a0, 0x3a8, 0xc0, 0x6a0, 0x6a0, 0x6a0, 0x6a0, 0x6a0, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x1}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x5, @multicast2, 0x4e23}}}, {{@ip={@remote, @multicast2, 0xff, 0xff0000ff, 'nicvf0\x00', 'vxcan1\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0xc0, 0x200}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3f, 0x80, @multicast2, 0x4e23}}}, {{@ip={@local, @loopback, 0xffffff00, 0xffffff00, 'vlan1\x00', 'nr0\x00', {0xff}, {}, 0x4, 0x2, 0x6}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@broadcast, 0x1}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x2, @ipv4=@empty, 0x4e20}}}, {{@uncond, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@addrtype={{0x30}, {0xc01, 0x48cceec0a8bae9a8, 0x1, 0x1}}, @common=@unspec=@bpf0={{0x230}, {0x3d, [{0x67, 0x9, 0x1, 0x5}, {0x8, 0x7f, 0x1, 0x1}, {0xfff, 0x54, 0x0, 0x800}, {0x4, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x6, 0x2}, {0x2, 0x4, 0x6}, {0x3, 0x4, 0x3, 0x45bc}, {0x20, 0x6, 0xd3, 0x2}, {0x4, 0xf1, 0x8, 0x3f}, {0xfff7, 0x40, 0xff, 0x1}, {0x5, 0x7, 0x1, 0x9}, {0x6, 0xff, 0x2, 0x9}, {0x6bf, 0x2, 0x8, 0x7}, {0x7f, 0xad, 0x7e, 0x5}, {0x4, 0x0, 0x3f, 0xffffffff}, {0x9, 0xfd, 0x20, 0x4}, {0x7, 0x2, 0x20, 0xff}, {0x3, 0x8b, 0x6, 0x2}, {0xdb, 0xf9, 0x7, 0x972}, {0x2, 0x9, 0x8, 0x8001}, {0x5, 0x0, 0x2, 0xfff}, {0x6, 0xcd, 0x1, 0x1ff}, {0xefd, 0x1, 0xd0, 0xffff}, {0x0, 0x1, 0x5, 0x40}, {0x3f, 0x7, 0x8, 0x10000}, {0x1000, 0x6c, 0x0, 0x6}, {0x9, 0x1f, 0x5, 0x4}, {0x9486, 0x6, 0x9, 0x216}, {0x733, 0x1, 0x4, 0x2c6}, {0x6, 0x3, 0x0, 0x9}, {0x8, 0x4, 0xb7, 0x10000}, {0x9, 0x40, 0x80, 0x9}, {0x81, 0x3, 0x1, 0x10001}, {0x7f, 0x7, 0x7, 0x3}, {0x101, 0x1, 0x7f, 0x6}, {0x100, 0x8, 0x7e, 0xe0b}, {0x9, 0x0, 0x5, 0x4}, {0x2, 0x7, 0xff, 0x6}, {0x3, 0x7, 0x80, 0xe23c}, {0x1000, 0x0, 0x7f, 0x1}, {0xfff, 0x6, 0x7, 0x4}, {0x3, 0x20, 0x7, 0x80}, {0x101, 0x1f, 0x5}, {0x8, 0x6, 0x5, 0x3}, {0x1, 0x6, 0x80, 0x1ff}, {0x9b5, 0x6, 0x12, 0x668}, {0x7, 0x2, 0x1, 0x1084bad0}, {0xf9b4, 0x7f, 0x5, 0x1}, {0x4, 0x0, 0x1f, 0x4}, {0x294, 0x4, 0x4, 0xe0}, {0x81, 0xf0, 0x7, 0x6e}, {0x20, 0xd8, 0xa8, 0x4000}, {0x3, 0x1, 0x0, 0x6}, {0x7, 0x6, 0xfe, 0xc52}, {0x2, 0x8, 0x6, 0x20}, {0xa820, 0x9f, 0x60, 0x8}, {0x7f, 0x0, 0x4, 0x7}, {0x8, 0x42, 0xbe, 0x6}, {0x1, 0x14, 0x5, 0x14}, {0x4, 0x3, 0x7f, 0x4}, {0x1, 0x19, 0x6, 0x5fa}, {0x20, 0x6, 0x40, 0x9}, {0x9, 0xf8, 0x20, 0x3ff}, {0x3, 0x4, 0xff, 0x99a}], {0xffffffffffffffff}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x798) (async) 00:22:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0xfffffff0) [ 1348.220123][T20187] x_tables: duplicate underflow at hook 1 00:22:28 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000000)={&(0x7f0000000000), 0x0, 0x180800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x40, 0x3, 0x200, {{0x7, 0x4, 0x2, 0xb, 0x1c, 0x67, 0x0, 0x81, 0x29, 0x0, @private=0xa010101, @remote, {[@end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000080)={'syztnl2\x00', 0x0}) 00:22:28 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000060}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getrule={0x14, 0x22, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x480c1}, 0x20000000) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000060}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getrule={0x14, 0x22, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x480c1}, 0x20000000) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) (async) [ 1348.254135][T20190] x_tables: duplicate underflow at hook 1 00:22:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@multicast2}]}}) 00:22:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x40030000000000) 00:22:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x738, 0x1a8, 0x2a0, 0x2a0, 0x3a8, 0xc0, 0x6a0, 0x6a0, 0x6a0, 0x6a0, 0x6a0, 0x6, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x1}}}, {{@uncond, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x5, @multicast2, 0x4e23}}}, {{@ip={@remote, @multicast2, 0xff, 0xff0000ff, 'nicvf0\x00', 'vxcan1\x00', {}, {}, 0x21, 0x2, 0x40}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0xc0, 0x200}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3f, 0x80, @multicast2, 0x4e23}}}, {{@ip={@local, @loopback, 0xffffff00, 0xffffff00, 'vlan1\x00', 'nr0\x00', {0xff}, {}, 0x4, 0x2, 0x6}, 0x0, 0xc8, 0x108, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@broadcast, 0x1}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x2, @ipv4=@empty, 0x4e20}}}, {{@uncond, 0x0, 0x2d0, 0x2f8, 0x0, {}, [@common=@addrtype={{0x30}, {0xc01, 0x48cceec0a8bae9a8, 0x1, 0x1}}, @common=@unspec=@bpf0={{0x230}, {0x3d, [{0x67, 0x9, 0x1, 0x5}, {0x8, 0x7f, 0x1, 0x1}, {0xfff, 0x54, 0x0, 0x800}, {0x4, 0xff, 0x4, 0x6}, {0x6, 0x9, 0x6, 0x2}, {0x2, 0x4, 0x6}, {0x3, 0x4, 0x3, 0x45bc}, {0x20, 0x6, 0xd3, 0x2}, {0x4, 0xf1, 0x8, 0x3f}, {0xfff7, 0x40, 0xff, 0x1}, {0x5, 0x7, 0x1, 0x9}, {0x6, 0xff, 0x2, 0x9}, {0x6bf, 0x2, 0x8, 0x7}, {0x7f, 0xad, 0x7e, 0x5}, {0x4, 0x0, 0x3f, 0xffffffff}, {0x9, 0xfd, 0x20, 0x4}, {0x7, 0x2, 0x20, 0xff}, {0x3, 0x8b, 0x6, 0x2}, {0xdb, 0xf9, 0x7, 0x972}, {0x2, 0x9, 0x8, 0x8001}, {0x5, 0x0, 0x2, 0xfff}, {0x6, 0xcd, 0x1, 0x1ff}, {0xefd, 0x1, 0xd0, 0xffff}, {0x0, 0x1, 0x5, 0x40}, {0x3f, 0x7, 0x8, 0x10000}, {0x1000, 0x6c, 0x0, 0x6}, {0x9, 0x1f, 0x5, 0x4}, {0x9486, 0x6, 0x9, 0x216}, {0x733, 0x1, 0x4, 0x2c6}, {0x6, 0x3, 0x0, 0x9}, {0x8, 0x4, 0xb7, 0x10000}, {0x9, 0x40, 0x80, 0x9}, {0x81, 0x3, 0x1, 0x10001}, {0x7f, 0x7, 0x7, 0x3}, {0x101, 0x1, 0x7f, 0x6}, {0x100, 0x8, 0x7e, 0xe0b}, {0x9, 0x0, 0x5, 0x4}, {0x2, 0x7, 0xff, 0x6}, {0x3, 0x7, 0x80, 0xe23c}, {0x1000, 0x0, 0x7f, 0x1}, {0xfff, 0x6, 0x7, 0x4}, {0x3, 0x20, 0x7, 0x80}, {0x101, 0x1f, 0x5}, {0x8, 0x6, 0x5, 0x3}, {0x1, 0x6, 0x80, 0x1ff}, {0x9b5, 0x6, 0x12, 0x668}, {0x7, 0x2, 0x1, 0x1084bad0}, {0xf9b4, 0x7f, 0x5, 0x1}, {0x4, 0x0, 0x1f, 0x4}, {0x294, 0x4, 0x4, 0xe0}, {0x81, 0xf0, 0x7, 0x6e}, {0x20, 0xd8, 0xa8, 0x4000}, {0x3, 0x1, 0x0, 0x6}, {0x7, 0x6, 0xfe, 0xc52}, {0x2, 0x8, 0x6, 0x20}, {0xa820, 0x9f, 0x60, 0x8}, {0x7f, 0x0, 0x4, 0x7}, {0x8, 0x42, 0xbe, 0x6}, {0x1, 0x14, 0x5, 0x14}, {0x4, 0x3, 0x7f, 0x4}, {0x1, 0x19, 0x6, 0x5fa}, {0x20, 0x6, 0x40, 0x9}, {0x9, 0xf8, 0x20, 0x3ff}, {0x3, 0x4, 0xff, 0x99a}], {0xffffffffffffffff}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3f}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x798) 00:22:28 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000000)={&(0x7f0000000000), 0x0, 0x180800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x40, 0x3, 0x200, {{0x7, 0x4, 0x2, 0xb, 0x1c, 0x67, 0x0, 0x81, 0x29, 0x0, @private=0xa010101, @remote, {[@end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000080)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000000)={&(0x7f0000000000), 0x0, 0x180800}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x40, 0x3, 0x200, {{0x7, 0x4, 0x2, 0xb, 0x1c, 0x67, 0x0, 0x81, 0x29, 0x0, @private=0xa010101, @remote, {[@end, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000080)={'syztnl2\x00', 0x0}) (async) [ 1348.339071][T20203] x_tables: duplicate underflow at hook 1 00:22:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0xfffffffff0000000, 0x8000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) 00:22:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x59af}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:28 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000000)={&(0x7f0000000000), 0x0, 0x180800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000000)={&(0x7f0000000000), 0x0, 0x180800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x40, 0x3, 0x200, {{0x7, 0x4, 0x2, 0xb, 0x1c, 0x67, 0x0, 0x81, 0x29, 0x0, @private=0xa010101, @remote, {[@end, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000080)={'syztnl2\x00', 0x0}) 00:22:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x100000000000000) 00:22:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:28 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x59af}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) 00:22:28 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0xfffffffff0000000, 0x8000}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x200000000000000) 00:22:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) 00:22:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x59af}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x59af}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) 00:22:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0xfffffffff0000000, 0x8000}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x300000000000000) 00:22:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) 00:22:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x0, 0x800, {{0x17, 0x4, 0x2, 0x14, 0x5c, 0x66, 0x0, 0x81, 0x29, 0x0, @loopback, @private=0xa010102, {[@lsrr={0x83, 0x17, 0xdd, [@broadcast, @private=0xa010100, @local, @multicast1, @broadcast]}, @cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "dd4b59d98afa30"}]}, @lsrr={0x83, 0x7, 0x1a, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x10, "43868f4b523f28922a20936ced27"}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_setlink={0xa4, 0x13, 0x800, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x20000, 0x4000}, [@IFLA_PHYS_SWITCH_ID={0x14, 0x24, "81081c7a43896b257d4afd114f36a5f9"}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_GROUP={0x8, 0x1b, 0xffffffdf}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x5}, @IFLA_MAP={0x24, 0xe, {0x7ff, 0x5, 0xffffffff, 0xa23, 0x20, 0x7}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFALIAS={0x14, 0x14, 'wg2\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'gre0\x00', 0x0}) 00:22:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x120, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0xc0005) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8901, &(0x7f0000000180)={'erspan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x74) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x30}}, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r4, 0x2, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x0, r3, 0x80000}) timerfd_settime(r8, 0x2, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) 00:22:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x400000000000000) 00:22:28 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) 00:22:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250200000008000b00", @ANYRES32=0x0, @ANYBLOB="050003006700000008000600000000000600000008000600ffffffff00000000"], 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) 00:22:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x0, 0x800, {{0x17, 0x4, 0x2, 0x14, 0x5c, 0x66, 0x0, 0x81, 0x29, 0x0, @loopback, @private=0xa010102, {[@lsrr={0x83, 0x17, 0xdd, [@broadcast, @private=0xa010100, @local, @multicast1, @broadcast]}, @cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "dd4b59d98afa30"}]}, @lsrr={0x83, 0x7, 0x1a, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x10, "43868f4b523f28922a20936ced27"}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_setlink={0xa4, 0x13, 0x800, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x20000, 0x4000}, [@IFLA_PHYS_SWITCH_ID={0x14, 0x24, "81081c7a43896b257d4afd114f36a5f9"}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_GROUP={0x8, 0x1b, 0xffffffdf}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x5}, @IFLA_MAP={0x24, 0xe, {0x7ff, 0x5, 0xffffffff, 0xa23, 0x20, 0x7}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFALIAS={0x14, 0x14, 'wg2\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'gre0\x00', 0x0}) 00:22:28 executing program 4: socket$inet(0x2, 0xc59ba616ad90eafa, 0x7ff) 00:22:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x500000000000000) 00:22:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x120, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0xc0005) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8901, &(0x7f0000000180)={'erspan0\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x74) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r6) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 64) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x30}}, 0x0) (rerun: 64) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r4, 0x2, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x0, r3, 0x80000}) timerfd_settime(r8, 0x2, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) 00:22:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r6, r7, 0x5, 0x30, 0xffffffffffffffff, @prog_fd=r5}, 0x20) 00:22:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x8, 0x1, 0x0, 0x800, {{0x17, 0x4, 0x2, 0x14, 0x5c, 0x66, 0x0, 0x81, 0x29, 0x0, @loopback, @private=0xa010102, {[@lsrr={0x83, 0x17, 0xdd, [@broadcast, @private=0xa010100, @local, @multicast1, @broadcast]}, @cipso={0x86, 0xf, 0x3, [{0x0, 0x9, "dd4b59d98afa30"}]}, @lsrr={0x83, 0x7, 0x1a, [@broadcast]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x10, "43868f4b523f28922a20936ced27"}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_setlink={0xa4, 0x13, 0x800, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x20000, 0x4000}, [@IFLA_PHYS_SWITCH_ID={0x14, 0x24, "81081c7a43896b257d4afd114f36a5f9"}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x9}, @IFLA_NET_NS_PID={0x8, 0x13, 0xffffffffffffffff}, @IFLA_GROUP={0x8, 0x1b, 0xffffffdf}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x5}, @IFLA_MAP={0x24, 0xe, {0x7ff, 0x5, 0xffffffff, 0xa23, 0x20, 0x7}}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFALIAS={0x14, 0x14, 'wg2\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'gre0\x00', 0x0}) 00:22:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x600000000000000) 00:22:28 executing program 4: socket$inet(0x2, 0x0, 0x7ff) 00:22:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250200000008000b00", @ANYRES32=0x0, @ANYBLOB="050003006700000008000600000000000600000008000600ffffffff00000000"], 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250200000008000b00", @ANYRES32=0x0, @ANYBLOB="050003006700000008000600000000000600000008000600ffffffff00000000"], 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) 00:22:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x1, r1, 0xdededede}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:28 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r6, r7, 0x5, 0x30, 0xffffffffffffffff, @prog_fd=r5}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) (async) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r6, r7, 0x5, 0x30, 0xffffffffffffffff, @prog_fd=r5}, 0x20) (async) 00:22:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x700000000000000) 00:22:28 executing program 4: socket$inet(0x2, 0x0, 0x7ff) 00:22:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x120, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0xc0005) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8901, &(0x7f0000000180)={'erspan0\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (rerun: 32) r6 = fsmount(r5, 0x0, 0x74) syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev}]}, 0x30}}, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 32) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r4, 0x2, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x0, r3, 0x80000}) timerfd_settime(r8, 0x2, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) 00:22:28 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd7000fbdbdf250200000008000b00", @ANYRES32=0x0, @ANYBLOB="050003006700000008000600000000000600000008000600ffffffff00000000"], 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x4) (async) socket$inet_udp(0x2, 0x2, 0x0) 00:22:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x1, r1, 0xdededede}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x1, r1, 0xdededede}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x900000000000000) 00:22:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) (async) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r6, r7, 0x5, 0x30, 0xffffffffffffffff, @prog_fd=r5}, 0x20) 00:22:29 executing program 4: socket$inet(0x2, 0x0, 0x7ff) 00:22:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x96}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xce7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x78}, 0x1, 0x0, 0x0, 0x6004840}, 0x4000091) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:29 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, r1, r2, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 00:22:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x4000000000000000) 00:22:29 executing program 4: socket$inet(0x2, 0xc59ba616ad90eafa, 0x0) 00:22:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x1, r1, 0xdededede}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x1, r1, 0xdededede}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x4000000) 00:22:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x96}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xce7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x78}, 0x1, 0x0, 0x0, 0x6004840}, 0x4000091) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x96}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xce7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x78}, 0x1, 0x0, 0x0, 0x6004840}, 0x4000091) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:29 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800}) (async) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, r1, r2, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0]}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 00:22:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x9227000000000000) 00:22:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x600000000000000) 00:22:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @empty}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x96}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xce7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x78}, 0x1, 0x0, 0x0, 0x6004840}, 0x4000091) (rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x4000000) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x4000000) (async) 00:22:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7, 0x20, 0xdf, 0x5, {{0x2e, 0x4, 0x3, 0x5, 0xb8, 0x67, 0x0, 0x98, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xf9, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @noop, @generic={0x7, 0xd, "600c9ef88d182398f76746"}, @rr={0x7, 0x17, 0x12, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @loopback, @empty, @private=0xa010102]}, @timestamp={0x44, 0x24, 0xbf, 0x0, 0x6, [0x1f, 0x28, 0xff, 0x8, 0xfffffffd, 0x7, 0x3, 0x6]}, @timestamp_addr={0x44, 0x24, 0x98, 0x1, 0x7, [{@multicast1}, {@loopback, 0x1f}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x300000}, {@multicast2}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x2c, 0x0, 0xb, [0x2, 0x8, 0x2, 0x100, 0x8001, 0x6, 0x7, 0x2]}]}}}}}) 00:22:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0xf0ffffff00000000) 00:22:29 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000100)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, r1, r2, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000200)={0x0, r1, r2, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 00:22:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r6, r7, 0x5, 0x30, 0xffffffffffffffff, @prog_fd=r5}, 0x20) 00:22:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0xffff80002bb5ffff) 00:22:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x4000000) 00:22:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400a0088}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x80}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x9}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) 00:22:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x20, 0x8, 0x0, 0x4, {{0x17, 0x4, 0x2, 0x12, 0x5c, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @remote, {[@timestamp={0x44, 0xc, 0xc3, 0x0, 0x3, [0xffffffe8, 0xec]}, @timestamp_prespec={0x44, 0x3c, 0xb6, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback}, {@loopback, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast2, 0x401}, {@broadcast}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 00:22:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r6, r7, 0x5, 0x30, 0xffffffffffffffff, @prog_fd=r5}, 0x20) 00:22:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x10}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24804}, 0x8040) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) 00:22:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x20, 0x8, 0x0, 0x4, {{0x17, 0x4, 0x2, 0x12, 0x5c, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @remote, {[@timestamp={0x44, 0xc, 0xc3, 0x0, 0x3, [0xffffffe8, 0xec]}, @timestamp_prespec={0x44, 0x3c, 0xb6, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback}, {@loopback, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast2, 0x401}, {@broadcast}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x20, 0x8, 0x0, 0x4, {{0x17, 0x4, 0x2, 0x12, 0x5c, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @remote, {[@timestamp={0x44, 0xc, 0xc3, 0x0, 0x3, [0xffffffe8, 0xec]}, @timestamp_prespec={0x44, 0x3c, 0xb6, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback}, {@loopback, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast2, 0x401}, {@broadcast}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'syztnl1\x00', 0x0}) 00:22:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400a0088}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x80}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x9}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400a0088}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x80}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x9}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) (async) 00:22:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7, 0x20, 0xdf, 0x5, {{0x2e, 0x4, 0x3, 0x5, 0xb8, 0x67, 0x0, 0x98, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xf9, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @noop, @generic={0x7, 0xd, "600c9ef88d182398f76746"}, @rr={0x7, 0x17, 0x12, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @loopback, @empty, @private=0xa010102]}, @timestamp={0x44, 0x24, 0xbf, 0x0, 0x6, [0x1f, 0x28, 0xff, 0x8, 0xfffffffd, 0x7, 0x3, 0x6]}, @timestamp_addr={0x44, 0x24, 0x98, 0x1, 0x7, [{@multicast1}, {@loopback, 0x1f}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x300000}, {@multicast2}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x2c, 0x0, 0xb, [0x2, 0x8, 0x2, 0x100, 0x8001, 0x6, 0x7, 0x2]}]}}}}}) 00:22:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0xffffb52b0080ffff) 00:22:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@ifindex=r6, r7, 0x5, 0x30, 0xffffffffffffffff, @prog_fd=r5}, 0x20) 00:22:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x10}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24804}, 0x8040) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x10}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24804}, 0x8040) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) 00:22:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x20, 0x8, 0x0, 0x4, {{0x17, 0x4, 0x2, 0x12, 0x5c, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @remote, {[@timestamp={0x44, 0xc, 0xc3, 0x0, 0x3, [0xffffffe8, 0xec]}, @timestamp_prespec={0x44, 0x3c, 0xb6, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback}, {@loopback, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast2, 0x401}, {@broadcast}]}]}}}}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000000)={'syztnl1\x00', 0x0}) (rerun: 64) 00:22:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400a0088}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x80}, @L2TP_ATTR_VLAN_ID={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x9}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) 00:22:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0xffffff7f00000000) 00:22:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x10}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24804}, 0x8040) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x10}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24804}, 0x8040) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) 00:22:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) 00:22:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="e0d92b2f119abfb7cf623c70432bf910b4a12081aae804a904f53e4a2e606e567f76522ff589c5db5e0ae649d941d8978ee3acbaaaaffcfbe344ca98d90b53b25d5dc4fd80d86a722431f1bbc5f65a9d96e2a1606bf55038478d3e3ed9e1e94aefa0710982f080ff7ac087df2e3b45ccab5b79eb83b509584cfde05e0a2668d18963c9369e2aeb2040ad54d828f558cb25c76b4d643510e69d", 0x99}, 0x1, 0x0, 0x0, 0x2404000c}, 0x4040844) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x10000000000006, r0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0xa, 0x5f6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0xb5}) 00:22:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0xffffffff00000000) 00:22:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7, 0x20, 0xdf, 0x5, {{0x2e, 0x4, 0x3, 0x5, 0xb8, 0x67, 0x0, 0x98, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xf9, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @noop, @generic={0x7, 0xd, "600c9ef88d182398f76746"}, @rr={0x7, 0x17, 0x12, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @loopback, @empty, @private=0xa010102]}, @timestamp={0x44, 0x24, 0xbf, 0x0, 0x6, [0x1f, 0x28, 0xff, 0x8, 0xfffffffd, 0x7, 0x3, 0x6]}, @timestamp_addr={0x44, 0x24, 0x98, 0x1, 0x7, [{@multicast1}, {@loopback, 0x1f}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x300000}, {@multicast2}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x2c, 0x0, 0xb, [0x2, 0x8, 0x2, 0x100, 0x8001, 0x6, 0x7, 0x2]}]}}}}}) 00:22:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) 00:22:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000396b2c543537f6b9d48500ae5b390304264713d2866643f8f149d19cf0c91f4eef36561d8ceeeb73e0b69f443eeb4615a6230f2a2d4cd8", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf250700000008001800640101000500220001e0110006001b004e20000006000e000200000008000b000100008006001b004e220000"], 0x44}, 0x1, 0x0, 0x0, 0x8045}, 0x8008045) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r3, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x100, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x186}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10001}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x28000000000}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffff80}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x100}, 0x1, 0x0, 0x0, 0x400c811}, 0x4000044) 00:22:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="e0d92b2f119abfb7cf623c70432bf910b4a12081aae804a904f53e4a2e606e567f76522ff589c5db5e0ae649d941d8978ee3acbaaaaffcfbe344ca98d90b53b25d5dc4fd80d86a722431f1bbc5f65a9d96e2a1606bf55038478d3e3ed9e1e94aefa0710982f080ff7ac087df2e3b45ccab5b79eb83b509584cfde05e0a2668d18963c9369e2aeb2040ad54d828f558cb25c76b4d643510e69d", 0x99}, 0x1, 0x0, 0x0, 0x2404000c}, 0x4040844) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 00:22:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x10000000000006, r0, 0x2}) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0xa, 0x5f6) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0xb5}) 00:22:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) 00:22:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000396b2c543537f6b9d48500ae5b390304264713d2866643f8f149d19cf0c91f4eef36561d8ceeeb73e0b69f443eeb4615a6230f2a2d4cd8", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf250700000008001800640101000500220001e0110006001b004e20000006000e000200000008000b000100008006001b004e220000"], 0x44}, 0x1, 0x0, 0x0, 0x8045}, 0x8008045) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r3, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x100, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x186}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10001}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x28000000000}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffff80}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x100}, 0x1, 0x0, 0x0, 0x400c811}, 0x4000044) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000396b2c543537f6b9d48500ae5b390304264713d2866643f8f149d19cf0c91f4eef36561d8ceeeb73e0b69f443eeb4615a6230f2a2d4cd8", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf250700000008001800640101000500220001e0110006001b004e20000006000e000200000008000b000100008006001b004e220000"], 0x44}, 0x1, 0x0, 0x0, 0x8045}, 0x8008045) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r3, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x38}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x100, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x186}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10001}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x28000000000}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffff80}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x100}, 0x1, 0x0, 0x0, 0x400c811}, 0x4000044) (async) 00:22:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="e0d92b2f119abfb7cf623c70432bf910b4a12081aae804a904f53e4a2e606e567f76522ff589c5db5e0ae649d941d8978ee3acbaaaaffcfbe344ca98d90b53b25d5dc4fd80d86a722431f1bbc5f65a9d96e2a1606bf55038478d3e3ed9e1e94aefa0710982f080ff7ac087df2e3b45ccab5b79eb83b509584cfde05e0a2668d18963c9369e2aeb2040ad54d828f558cb25c76b4d643510e69d", 0x99}, 0x1, 0x0, 0x0, 0x2404000c}, 0x4040844) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$can_j1939(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="e0d92b2f119abfb7cf623c70432bf910b4a12081aae804a904f53e4a2e606e567f76522ff589c5db5e0ae649d941d8978ee3acbaaaaffcfbe344ca98d90b53b25d5dc4fd80d86a722431f1bbc5f65a9d96e2a1606bf55038478d3e3ed9e1e94aefa0710982f080ff7ac087df2e3b45ccab5b79eb83b509584cfde05e0a2668d18963c9369e2aeb2040ad54d828f558cb25c76b4d643510e69d", 0x99}, 0x1, 0x0, 0x0, 0x2404000c}, 0x4040844) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) 00:22:29 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 00:22:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) 00:22:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x8, 0x1ff, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x68, 0x0, 0x40, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_addr={0x44, 0x1c, 0x6, 0x1, 0xa, [{@loopback, 0xffff72bc}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd77f}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x1, 0x7800, 0x10000, 0x1ff, {{0x23, 0x4, 0x3, 0x21, 0x8c, 0x66, 0x0, 0x1f, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x11, "4d4bfecf3f74bddc94bba323b699dd"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0x8e, 0x3, 0x2, [{@empty, 0xfff}, {@remote, 0x6641}, {@remote}, {@broadcast, 0x1000}, {@loopback, 0x9}, {@multicast1, 0xafcb}]}, @end, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0x8, [{@multicast2, 0x9}, {@loopback, 0x1000}, {@rand_addr=0x64010100, 0x100}]}, @end, @timestamp_prespec={0x44, 0xc, 0x96, 0x3, 0x0, [{@multicast2, 0x1}]}]}}}}}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2f, 0x33a12f03c9d4803f, 0x5, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r2, 0xffffffffffffffff, 0x13, 0x2004, 0x0, @prog_fd, r3}, 0x20) 00:22:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x10000000000006, r0, 0x2}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x10000000000006, r0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0xa, 0x5f6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0xb5}) 00:22:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000396b2c543537f6b9d48500ae5b390304264713d2866643f8f149d19cf0c91f4eef36561d8ceeeb73e0b69f443eeb4615a6230f2a2d4cd8", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf250700000008001800640101000500220001e0110006001b004e20000006000e000200000008000b000100008006001b004e220000"], 0x44}, 0x1, 0x0, 0x0, 0x8045}, 0x8008045) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r3, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x100, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x186}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10001}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x28000000000}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffff80}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x100}, 0x1, 0x0, 0x0, 0x400c811}, 0x4000044) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000396b2c543537f6b9d48500ae5b390304264713d2866643f8f149d19cf0c91f4eef36561d8ceeeb73e0b69f443eeb4615a6230f2a2d4cd8", @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf250700000008001800640101000500220001e0110006001b004e20000006000e000200000008000b000100008006001b004e220000"], 0x44}, 0x1, 0x0, 0x0, 0x8045}, 0x8008045) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r3, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x38}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x100, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80000000}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x186}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10001}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x28000000000}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffff80}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x100}, 0x1, 0x0, 0x0, 0x400c811}, 0x4000044) (async) 00:22:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 00:22:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) openat$cgroup_int(r4, &(0x7f0000000480)='io.max\x00', 0x2, 0x0) 00:22:29 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x8682b04a2fbe31c, 0x7fffffff, 0x9, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x64, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010102, {[@generic={0x94, 0x8, "06d3f7976886"}, @timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0x7, [{@multicast2, 0x2}]}, @cipso={0x86, 0x40, 0x0, [{0x1, 0xc, "5615173599e4c6cb943f"}, {0x7, 0xc, "8f48da8e5019be439bfe"}, {0x7, 0x4, "a8ce"}, {0x2, 0xe, "a21d83b8407b4a17bdff43e8"}, {0x5, 0x3, '/'}, {0x6, 0xd, "05371765e00b4be10df30c"}]}, @generic={0x83, 0xf, "df417149c0b4cec3aeb10b6267"}, @ssrr={0x89, 0xb, 0x68, [@local, @private=0xa010100]}]}}}}}) 00:22:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0xf0ffffff00000000) 00:22:29 executing program 5: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd883}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1b}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x40010) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x50) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x3, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 00:22:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x10, 0x700, 0x1, 0x8, {{0x31, 0x4, 0x1, 0x3e, 0xc4, 0x67, 0x0, 0xd1, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@lsrr={0x83, 0x27, 0x71, [@loopback, @rand_addr=0x64010101, @loopback, @multicast2, @rand_addr=0x64010102, @multicast1, @local, @broadcast, @loopback]}, @ssrr={0x89, 0x17, 0xa9, [@remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1]}, @generic={0x94, 0xd, "1b1259a8c15a8ec507d2a0"}, @timestamp_addr={0x44, 0x54, 0x83, 0x1, 0x5, [{@loopback, 0x1}, {@local, 0x3f}, {@private=0xa010101, 0x8}, {@remote, 0x8cd}, {@multicast1, 0x1000}, {@local}, {@private=0xa010101, 0x1}, {@remote, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xca0}, {@multicast1, 0x1}]}, @generic={0x0, 0xe, "5a9aad2271e7c5039c825f43"}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', r3, 0x7800, 0x20, 0x7a2d1f39, 0x3, {{0x1e, 0x4, 0x1, 0x28, 0x78, 0x64, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010101, {[@end, @timestamp_addr={0x44, 0xc, 0x25, 0x1, 0x5, [{@remote, 0x8004}]}, @timestamp={0x44, 0x18, 0x63, 0x0, 0x9, [0x3, 0x3, 0x8000, 0x2, 0x3]}, @timestamp={0x44, 0x10, 0xb4, 0x0, 0x7, [0x800, 0x91, 0x5570]}, @noop, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x5, 0xb, "1f15c9ecece86cfb2b"}, {0x7, 0x4, "0dda"}]}, @timestamp={0x44, 0x18, 0xc3, 0x0, 0x8, [0x1, 0x200, 0x9, 0xc18, 0x7ff]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000340)={@rand_addr=' \x01\x00', @remote, 0x0, 0x13}}) r4 = fsmount(r2, 0x1, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', r3, 0x80, 0x7800, 0x3ff, 0x1, {{0xe, 0x4, 0x3, 0x0, 0x38, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x5, 0x3, 0x8}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x86, 0x7, "4aa79265ea"}, @ssrr={0x89, 0xf, 0xa5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 00:22:30 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x8682b04a2fbe31c, 0x7fffffff, 0x9, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x64, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010102, {[@generic={0x94, 0x8, "06d3f7976886"}, @timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0x7, [{@multicast2, 0x2}]}, @cipso={0x86, 0x40, 0x0, [{0x1, 0xc, "5615173599e4c6cb943f"}, {0x7, 0xc, "8f48da8e5019be439bfe"}, {0x7, 0x4, "a8ce"}, {0x2, 0xe, "a21d83b8407b4a17bdff43e8"}, {0x5, 0x3, '/'}, {0x6, 0xd, "05371765e00b4be10df30c"}]}, @generic={0x83, 0xf, "df417149c0b4cec3aeb10b6267"}, @ssrr={0x89, 0xb, 0x68, [@local, @private=0xa010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x8682b04a2fbe31c, 0x7fffffff, 0x9, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x64, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010102, {[@generic={0x94, 0x8, "06d3f7976886"}, @timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0x7, [{@multicast2, 0x2}]}, @cipso={0x86, 0x40, 0x0, [{0x1, 0xc, "5615173599e4c6cb943f"}, {0x7, 0xc, "8f48da8e5019be439bfe"}, {0x7, 0x4, "a8ce"}, {0x2, 0xe, "a21d83b8407b4a17bdff43e8"}, {0x5, 0x3, '/'}, {0x6, 0xd, "05371765e00b4be10df30c"}]}, @generic={0x83, 0xf, "df417149c0b4cec3aeb10b6267"}, @ssrr={0x89, 0xb, 0x68, [@local, @private=0xa010100]}]}}}}}) (async) 00:22:30 executing program 5: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd883}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1b}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x40010) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x50) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x3, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 00:22:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x8, 0x1ff, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x68, 0x0, 0x40, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_addr={0x44, 0x1c, 0x6, 0x1, 0xa, [{@loopback, 0xffff72bc}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd77f}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x1, 0x7800, 0x10000, 0x1ff, {{0x23, 0x4, 0x3, 0x21, 0x8c, 0x66, 0x0, 0x1f, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x11, "4d4bfecf3f74bddc94bba323b699dd"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0x8e, 0x3, 0x2, [{@empty, 0xfff}, {@remote, 0x6641}, {@remote}, {@broadcast, 0x1000}, {@loopback, 0x9}, {@multicast1, 0xafcb}]}, @end, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0x8, [{@multicast2, 0x9}, {@loopback, 0x1000}, {@rand_addr=0x64010100, 0x100}]}, @end, @timestamp_prespec={0x44, 0xc, 0x96, 0x3, 0x0, [{@multicast2, 0x1}]}]}}}}}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2f, 0x33a12f03c9d4803f, 0x5, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r2, 0xffffffffffffffff, 0x13, 0x2004, 0x0, @prog_fd, r3}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x8, 0x1ff, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x68, 0x0, 0x40, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_addr={0x44, 0x1c, 0x6, 0x1, 0xa, [{@loopback, 0xffff72bc}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd77f}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x1, 0x7800, 0x10000, 0x1ff, {{0x23, 0x4, 0x3, 0x21, 0x8c, 0x66, 0x0, 0x1f, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x11, "4d4bfecf3f74bddc94bba323b699dd"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0x8e, 0x3, 0x2, [{@empty, 0xfff}, {@remote, 0x6641}, {@remote}, {@broadcast, 0x1000}, {@loopback, 0x9}, {@multicast1, 0xafcb}]}, @end, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0x8, [{@multicast2, 0x9}, {@loopback, 0x1000}, {@rand_addr=0x64010100, 0x100}]}, @end, @timestamp_prespec={0x44, 0xc, 0x96, 0x3, 0x0, [{@multicast2, 0x1}]}]}}}}}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2f, 0x33a12f03c9d4803f, 0x5, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r2, 0xffffffffffffffff, 0x13, 0x2004, 0x0, @prog_fd, r3}, 0x20) (async) 00:22:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x92270000) 00:22:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x10, 0x700, 0x1, 0x8, {{0x31, 0x4, 0x1, 0x3e, 0xc4, 0x67, 0x0, 0xd1, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@lsrr={0x83, 0x27, 0x71, [@loopback, @rand_addr=0x64010101, @loopback, @multicast2, @rand_addr=0x64010102, @multicast1, @local, @broadcast, @loopback]}, @ssrr={0x89, 0x17, 0xa9, [@remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1]}, @generic={0x94, 0xd, "1b1259a8c15a8ec507d2a0"}, @timestamp_addr={0x44, 0x54, 0x83, 0x1, 0x5, [{@loopback, 0x1}, {@local, 0x3f}, {@private=0xa010101, 0x8}, {@remote, 0x8cd}, {@multicast1, 0x1000}, {@local}, {@private=0xa010101, 0x1}, {@remote, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xca0}, {@multicast1, 0x1}]}, @generic={0x0, 0xe, "5a9aad2271e7c5039c825f43"}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', r3, 0x7800, 0x20, 0x7a2d1f39, 0x3, {{0x1e, 0x4, 0x1, 0x28, 0x78, 0x64, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010101, {[@end, @timestamp_addr={0x44, 0xc, 0x25, 0x1, 0x5, [{@remote, 0x8004}]}, @timestamp={0x44, 0x18, 0x63, 0x0, 0x9, [0x3, 0x3, 0x8000, 0x2, 0x3]}, @timestamp={0x44, 0x10, 0xb4, 0x0, 0x7, [0x800, 0x91, 0x5570]}, @noop, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x5, 0xb, "1f15c9ecece86cfb2b"}, {0x7, 0x4, "0dda"}]}, @timestamp={0x44, 0x18, 0xc3, 0x0, 0x8, [0x1, 0x200, 0x9, 0xc18, 0x7ff]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000340)={@rand_addr=' \x01\x00', @remote, 0x0, 0x13}}) (async, rerun: 32) r4 = fsmount(r2, 0x1, 0xa) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', r3, 0x80, 0x7800, 0x3ff, 0x1, {{0xe, 0x4, 0x3, 0x0, 0x38, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x5, 0x3, 0x8}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x86, 0x7, "4aa79265ea"}, @ssrr={0x89, 0xf, 0xa5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 00:22:30 executing program 2: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x8682b04a2fbe31c, 0x7fffffff, 0x9, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x64, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010102, {[@generic={0x94, 0x8, "06d3f7976886"}, @timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0x7, [{@multicast2, 0x2}]}, @cipso={0x86, 0x40, 0x0, [{0x1, 0xc, "5615173599e4c6cb943f"}, {0x7, 0xc, "8f48da8e5019be439bfe"}, {0x7, 0x4, "a8ce"}, {0x2, 0xe, "a21d83b8407b4a17bdff43e8"}, {0x5, 0x3, '/'}, {0x6, 0xd, "05371765e00b4be10df30c"}]}, @generic={0x83, 0xf, "df417149c0b4cec3aeb10b6267"}, @ssrr={0x89, 0xb, 0x68, [@local, @private=0xa010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x80, 0x8682b04a2fbe31c, 0x7fffffff, 0x9, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x64, 0x0, 0x2, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010102, {[@generic={0x94, 0x8, "06d3f7976886"}, @timestamp_prespec={0x44, 0xc, 0xd5, 0x3, 0x7, [{@multicast2, 0x2}]}, @cipso={0x86, 0x40, 0x0, [{0x1, 0xc, "5615173599e4c6cb943f"}, {0x7, 0xc, "8f48da8e5019be439bfe"}, {0x7, 0x4, "a8ce"}, {0x2, 0xe, "a21d83b8407b4a17bdff43e8"}, {0x5, 0x3, '/'}, {0x6, 0xd, "05371765e00b4be10df30c"}]}, @generic={0x83, 0xf, "df417149c0b4cec3aeb10b6267"}, @ssrr={0x89, 0xb, 0x68, [@local, @private=0xa010100]}]}}}}}) (async) 00:22:30 executing program 5: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd883}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1b}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x40010) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x50) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x3, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xd883}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1000}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1b}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x40010) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x50) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x3, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 00:22:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x92270000) 00:22:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x10, 0x700, 0x1, 0x8, {{0x31, 0x4, 0x1, 0x3e, 0xc4, 0x67, 0x0, 0xd1, 0x2f, 0x0, @empty, @rand_addr=0x64010100, {[@lsrr={0x83, 0x27, 0x71, [@loopback, @rand_addr=0x64010101, @loopback, @multicast2, @rand_addr=0x64010102, @multicast1, @local, @broadcast, @loopback]}, @ssrr={0x89, 0x17, 0xa9, [@remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1]}, @generic={0x94, 0xd, "1b1259a8c15a8ec507d2a0"}, @timestamp_addr={0x44, 0x54, 0x83, 0x1, 0x5, [{@loopback, 0x1}, {@local, 0x3f}, {@private=0xa010101, 0x8}, {@remote, 0x8cd}, {@multicast1, 0x1000}, {@local}, {@private=0xa010101, 0x1}, {@remote, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xca0}, {@multicast1, 0x1}]}, @generic={0x0, 0xe, "5a9aad2271e7c5039c825f43"}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'sit0\x00', &(0x7f00000001c0)={'tunl0\x00', r3, 0x7800, 0x20, 0x7a2d1f39, 0x3, {{0x1e, 0x4, 0x1, 0x28, 0x78, 0x64, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @rand_addr=0x64010101, {[@end, @timestamp_addr={0x44, 0xc, 0x25, 0x1, 0x5, [{@remote, 0x8004}]}, @timestamp={0x44, 0x18, 0x63, 0x0, 0x9, [0x3, 0x3, 0x8000, 0x2, 0x3]}, @timestamp={0x44, 0x10, 0xb4, 0x0, 0x7, [0x800, 0x91, 0x5570]}, @noop, @cipso={0x86, 0x15, 0xffffffffffffffff, [{0x5, 0xb, "1f15c9ecece86cfb2b"}, {0x7, 0x4, "0dda"}]}, @timestamp={0x44, 0x18, 0xc3, 0x0, 0x8, [0x1, 0x200, 0x9, 0xc18, 0x7ff]}]}}}}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000340)={@rand_addr=' \x01\x00', @remote, 0x0, 0x13}}) (rerun: 32) r4 = fsmount(r2, 0x1, 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', r3, 0x80, 0x7800, 0x3ff, 0x1, {{0xe, 0x4, 0x3, 0x0, 0x38, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x5, 0x3, 0x8}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @generic={0x86, 0x7, "4aa79265ea"}, @ssrr={0x89, 0xf, 0xa5, [@multicast1, @dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 00:22:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x8, 0x1ff, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x68, 0x0, 0x40, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_addr={0x44, 0x1c, 0x6, 0x1, 0xa, [{@loopback, 0xffff72bc}, {@empty, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd77f}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x1, 0x7800, 0x10000, 0x1ff, {{0x23, 0x4, 0x3, 0x21, 0x8c, 0x66, 0x0, 0x1f, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x11, "4d4bfecf3f74bddc94bba323b699dd"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0x8e, 0x3, 0x2, [{@empty, 0xfff}, {@remote, 0x6641}, {@remote}, {@broadcast, 0x1000}, {@loopback, 0x9}, {@multicast1, 0xafcb}]}, @end, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0x8, [{@multicast2, 0x9}, {@loopback, 0x1000}, {@rand_addr=0x64010100, 0x100}]}, @end, @timestamp_prespec={0x44, 0xc, 0x96, 0x3, 0x0, [{@multicast2, 0x1}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x1, 0x7800, 0x10000, 0x1ff, {{0x23, 0x4, 0x3, 0x21, 0x8c, 0x66, 0x0, 0x1f, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, {[@cipso={0x86, 0x19, 0xffffffffffffffff, [{0x2, 0x11, "4d4bfecf3f74bddc94bba323b699dd"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0x34, 0x8e, 0x3, 0x2, [{@empty, 0xfff}, {@remote, 0x6641}, {@remote}, {@broadcast, 0x1000}, {@loopback, 0x9}, {@multicast1, 0xafcb}]}, @end, @timestamp_addr={0x44, 0x1c, 0xa7, 0x1, 0x8, [{@multicast2, 0x9}, {@loopback, 0x1000}, {@rand_addr=0x64010100, 0x100}]}, @end, @timestamp_prespec={0x44, 0xc, 0x96, 0x3, 0x0, [{@multicast2, 0x1}]}]}}}}}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2f, 0x33a12f03c9d4803f, 0x5, &(0x7f0000000240)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r2, 0xffffffffffffffff, 0x13, 0x2004, 0x0, @prog_fd, r3}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r2, 0xffffffffffffffff, 0x13, 0x2004, 0x0, @prog_fd, r3}, 0x20) 00:22:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0xa486390df5a90033, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8890}, 0x40008b0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x92270000) 00:22:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:30 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r0, 0x200, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) 00:22:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0xa486390df5a90033, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8890}, 0x40008b0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r1, 0xffffffffffffffff, 0x12, 0x2064, 0x0, @prog_fd}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="64010100000000001000000000000000e000000200000000000000000000000018685abc84ee0a5b107f5fcfee670834dd0d8d8da53072f34ec668e9e69fd5415b7d5270fb81a59c3164e0cc2d82672ce381753636ddae93c3f91fd89dbc1c14226f70727c"]}) 00:22:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x81, r0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='\x00\x00\xd1)\x82\xa6L\xd41\xe03\xa6-\"\xab\x00\x00\x00\x00\x00\x00\xa6\xad\xf7]S\xf1\x19\xfc\xee\xf2\xbb\xe5(\xbbM\x8b\x86\xa8\xf8\xc3w\xfb\xfe\xb3\xd7\x18\x067\t\xed\x80\x8f\xfbd\xc1\xd1\xee\x91\x19\x10\xc93\x86In\x0fl\xa3a\f4\xda\x12\xcfN\x94H\x05)_\x19\x8b\xa8\x1d\xb2Z\xf7`\xbc\xa0\xb4$\xfe?-\xea\xd3\x8d\xf6\xc3\xfd\xf5\xb7[\xec\xf0nw.T\xf6i\x11\xee\xc2R\xdd\xf3?\x991\v5\xd7x\x81*9wQ\n\xbd\xfc\x0e\xd1q\x82\xf4\xee)\x1e\\}\x9b\xe4Bl\xbcu,8\xb3\xbb\xd8\xeeK5\xe1w\xb6\"\xc7\xce\xe3\xa7\xb6\xc9\x1cO\xfb)\x7f\x83@\xc9\n\xbb\x82\r\xe2\x96\xe9\x19|\xd4+\xc9\x01\xfb\"\x8e\xd8qb\xdd!AZ\x8fl\xee\x8c\x1c\x19\xcc\xdd*\xaf>\xba\xf4\xcc\xa7\xfbf>\xca\x03\xea', &(0x7f0000000040)='syzdnl2\x001\xb5\x80\xect\xc90\xd7g)\xaf\x90\x95\xc8\xcf!\x0f,\"y\x93f\xd1\xed\x0f\xb6S\x18\xce8\xa6\x1f\x92\xe5\x03\v\x18p\x80\xc4\x18w#N\xce[Q\xf6\x8ca)\xbd\xbc\xb8va\b\xd1\xc3\xfa\x82+\xe2\x83\xac\xf5\xbd\x1d\x9dM\x13Kgc.T\xc4I\xec\xf4\xa4m\x00\xe5T\xec\\\xc4aZ\x96\xaf\xe7]v\xf2\x1c\x80h\xac\a\xdf\xd1-H\xb6\x0eJ\xe8\xb8&\x82\x9b\x90m\xb0\xc4z', 0x0) 00:22:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x92270000) 00:22:30 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r0, 0x200, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) socket$inet_dccp(0x2, 0x6, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r0, 0x200, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) (async) 00:22:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0xa486390df5a90033, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x100}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8890}, 0x40008b0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r1, 0xffffffffffffffff, 0x12, 0x2064, 0x0, @prog_fd}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="64010100000000001000000000000000e000000200000000000000000000000018685abc84ee0a5b107f5fcfee670834dd0d8d8da53072f34ec668e9e69fd5415b7d5270fb81a59c3164e0cc2d82672ce381753636ddae93c3f91fd89dbc1c14226f70727c"]}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r1, 0xffffffffffffffff, 0x12, 0x2064, 0x0, @prog_fd}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="64010100000000001000000000000000e000000200000000000000000000000018685abc84ee0a5b107f5fcfee670834dd0d8d8da53072f34ec668e9e69fd5415b7d5270fb81a59c3164e0cc2d82672ce381753636ddae93c3f91fd89dbc1c14226f70727c"]}) (async) 00:22:30 executing program 1: sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x0, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x92270000) 00:22:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x81, r0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='\x00\x00\xd1)\x82\xa6L\xd41\xe03\xa6-\"\xab\x00\x00\x00\x00\x00\x00\xa6\xad\xf7]S\xf1\x19\xfc\xee\xf2\xbb\xe5(\xbbM\x8b\x86\xa8\xf8\xc3w\xfb\xfe\xb3\xd7\x18\x067\t\xed\x80\x8f\xfbd\xc1\xd1\xee\x91\x19\x10\xc93\x86In\x0fl\xa3a\f4\xda\x12\xcfN\x94H\x05)_\x19\x8b\xa8\x1d\xb2Z\xf7`\xbc\xa0\xb4$\xfe?-\xea\xd3\x8d\xf6\xc3\xfd\xf5\xb7[\xec\xf0nw.T\xf6i\x11\xee\xc2R\xdd\xf3?\x991\v5\xd7x\x81*9wQ\n\xbd\xfc\x0e\xd1q\x82\xf4\xee)\x1e\\}\x9b\xe4Bl\xbcu,8\xb3\xbb\xd8\xeeK5\xe1w\xb6\"\xc7\xce\xe3\xa7\xb6\xc9\x1cO\xfb)\x7f\x83@\xc9\n\xbb\x82\r\xe2\x96\xe9\x19|\xd4+\xc9\x01\xfb\"\x8e\xd8qb\xdd!AZ\x8fl\xee\x8c\x1c\x19\xcc\xdd*\xaf>\xba\xf4\xcc\xa7\xfbf>\xca\x03\xea', &(0x7f0000000040)='syzdnl2\x001\xb5\x80\xect\xc90\xd7g)\xaf\x90\x95\xc8\xcf!\x0f,\"y\x93f\xd1\xed\x0f\xb6S\x18\xce8\xa6\x1f\x92\xe5\x03\v\x18p\x80\xc4\x18w#N\xce[Q\xf6\x8ca)\xbd\xbc\xb8va\b\xd1\xc3\xfa\x82+\xe2\x83\xac\xf5\xbd\x1d\x9dM\x13Kgc.T\xc4I\xec\xf4\xa4m\x00\xe5T\xec\\\xc4aZ\x96\xaf\xe7]v\xf2\x1c\x80h\xac\a\xdf\xd1-H\xb6\x0eJ\xe8\xb8&\x82\x9b\x90m\xb0\xc4z', 0x0) 00:22:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x81, r0, 0x2}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='\x00\x00\xd1)\x82\xa6L\xd41\xe03\xa6-\"\xab\x00\x00\x00\x00\x00\x00\xa6\xad\xf7]S\xf1\x19\xfc\xee\xf2\xbb\xe5(\xbbM\x8b\x86\xa8\xf8\xc3w\xfb\xfe\xb3\xd7\x18\x067\t\xed\x80\x8f\xfbd\xc1\xd1\xee\x91\x19\x10\xc93\x86In\x0fl\xa3a\f4\xda\x12\xcfN\x94H\x05)_\x19\x8b\xa8\x1d\xb2Z\xf7`\xbc\xa0\xb4$\xfe?-\xea\xd3\x8d\xf6\xc3\xfd\xf5\xb7[\xec\xf0nw.T\xf6i\x11\xee\xc2R\xdd\xf3?\x991\v5\xd7x\x81*9wQ\n\xbd\xfc\x0e\xd1q\x82\xf4\xee)\x1e\\}\x9b\xe4Bl\xbcu,8\xb3\xbb\xd8\xeeK5\xe1w\xb6\"\xc7\xce\xe3\xa7\xb6\xc9\x1cO\xfb)\x7f\x83@\xc9\n\xbb\x82\r\xe2\x96\xe9\x19|\xd4+\xc9\x01\xfb\"\x8e\xd8qb\xdd!AZ\x8fl\xee\x8c\x1c\x19\xcc\xdd*\xaf>\xba\xf4\xcc\xa7\xfbf>\xca\x03\xea', &(0x7f0000000040)='syzdnl2\x001\xb5\x80\xect\xc90\xd7g)\xaf\x90\x95\xc8\xcf!\x0f,\"y\x93f\xd1\xed\x0f\xb6S\x18\xce8\xa6\x1f\x92\xe5\x03\v\x18p\x80\xc4\x18w#N\xce[Q\xf6\x8ca)\xbd\xbc\xb8va\b\xd1\xc3\xfa\x82+\xe2\x83\xac\xf5\xbd\x1d\x9dM\x13Kgc.T\xc4I\xec\xf4\xa4m\x00\xe5T\xec\\\xc4aZ\x96\xaf\xe7]v\xf2\x1c\x80h\xac\a\xdf\xd1-H\xb6\x0eJ\xe8\xb8&\x82\x9b\x90m\xb0\xc4z', 0x0) 00:22:30 executing program 1: sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x92270000) 00:22:30 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x7, 0x80, 0x401, 0x400, 0x1, 0x5, '\x00', r0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)=0x737) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@remote, @dev={0xac, 0x14, 0x14, 0x1e}, 0x8, 0xd}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:30 executing program 5: socket$inet_dccp(0x2, 0x6, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r0, 0x200, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) socket$inet_dccp(0x2, 0x6, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r0, 0x200, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000000)) (async) 00:22:30 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x1, 0xffffffffffffffff, 0x1}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xb1a1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xbe}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r1, 0xffffffffffffffff, 0x12, 0x2064, 0x0, @prog_fd}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="64010100000000001000000000000000e000000200000000000000000000000018685abc84ee0a5b107f5fcfee670834dd0d8d8da53072f34ec668e9e69fd5415b7d5270fb81a59c3164e0cc2d82672ce381753636ddae93c3f91fd89dbc1c14226f70727c"]}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r1, 0xffffffffffffffff, 0x12, 0x2064, 0x0, @prog_fd}, 0x20) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000080)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="64010100000000001000000000000000e000000200000000000000000000000018685abc84ee0a5b107f5fcfee670834dd0d8d8da53072f34ec668e9e69fd5415b7d5270fb81a59c3164e0cc2d82672ce381753636ddae93c3f91fd89dbc1c14226f70727c"]}) (async) 00:22:30 executing program 1: sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) 00:22:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x7d82, 0x8e4, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:30 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x7, 0x80, 0x401, 0x400, 0x1, 0x5, '\x00', r0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)=0x737) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@remote, @dev={0xac, 0x14, 0x14, 0x1e}, 0x8, 0xd}}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (rerun: 64) 00:22:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) 00:22:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff03, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x400}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000011}, 0x4081) 00:22:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:30 executing program 1: sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) 00:22:30 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x1, 0xffffffffffffffff, 0x1}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xb1a1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xbe}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x40) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:30 executing program 2: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x7, 0x80, 0x401, 0x400, 0x1, 0x5, '\x00', r0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000140)=0x737) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@remote, @dev={0xac, 0x14, 0x14, 0x1e}, 0x8, 0xd}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) 00:22:30 executing program 1: sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x0) 00:22:30 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'sit0\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0x2, 0xeb, &(0x7f0000000040)="533378a4b8fb151c29b6e93dffaa462856d0aee6ac974988fd1cdf4df8603e151b1127c895d74b7071fbc3fb8eb95fedccc7ed9b9d644856e47df271559f4a359c83113e171af603095f8ffb3e7b036f4ed7cd049a2e6df1b97aa3102441137599bb0f0a5fff0c141f016979af9844603e636487ec26c7e42ff655dd128acdc367bafac9c9934fcf8bd5c6ecbe0dfe1988aa5d352b5c00b8265911d6b4f6fd3df16475815989d2b445af4b46af07797c28599f99af00cc47fc877f5287bd38f5810f035809b382ff7ead72b811bb615d380dabfb4c52998dbc78b144df22285a9ee8dabcd9afe5e1e50345", 0x0, 0x1, 0x1, 0x2, 0x2fd2, 0x0, 0x86a, 'syz1\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000240)={0x80000000, r2, 0x1dcd00c2d832699b}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r3) 00:22:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x3000000) 00:22:30 executing program 0: r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x1, 0xffffffffffffffff, 0x1}) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xb1a1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xbe}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x40) (async) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp=r1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xb1a1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xbe}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) 00:22:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff03, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x400}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000011}, 0x4081) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff03, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x400}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000011}, 0x4081) (async) 00:22:30 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'sit0\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0x2, 0xeb, &(0x7f0000000040)="533378a4b8fb151c29b6e93dffaa462856d0aee6ac974988fd1cdf4df8603e151b1127c895d74b7071fbc3fb8eb95fedccc7ed9b9d644856e47df271559f4a359c83113e171af603095f8ffb3e7b036f4ed7cd049a2e6df1b97aa3102441137599bb0f0a5fff0c141f016979af9844603e636487ec26c7e42ff655dd128acdc367bafac9c9934fcf8bd5c6ecbe0dfe1988aa5d352b5c00b8265911d6b4f6fd3df16475815989d2b445af4b46af07797c28599f99af00cc47fc877f5287bd38f5810f035809b382ff7ead72b811bb615d380dabfb4c52998dbc78b144df22285a9ee8dabcd9afe5e1e50345", 0x0, 0x1, 0x1, 0x2, 0x2fd2, 0x0, 0x86a, 'syz1\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000240)={0x80000000, r2, 0x1dcd00c2d832699b}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r3) 00:22:30 executing program 3: r0 = gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet(0x2, 0x3, 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c102650ab5b907267c1b3b5c7043f88082daf861ceedf4f003c61ecb0fc3457fdc03dc8fdb0d238ecd4c51f8a25008a4af215f10b30c400"/75, @ANYRES32=0x0, @ANYBLOB="00800010000000030000f5c34e71003800660000052f9078640101000a0101008616000000010510c44d6d736f230e0bc3dc7b6dfd05440cd620000000080001000001014eb7b28511c7f23a799bdb4c00c5aac84c61d72a04cdae199c71e8606652e02897491f6cee94265bab8c54eef7cc3a45c1c42f6c00e109e8fe3e53b11db429b769a5eadc82afd72f844dc4ec426d133f147263ab3898b740259e531ae3786888f75210221571944920a55605b2af489810dfd14b0d3100d050a9"]}) pidfd_open(r0, 0x0) 00:22:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x3000000) 00:22:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x40, 0x7, 0x2, 0x5, {{0x2b, 0x4, 0x0, 0x3, 0xac, 0x67, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0x24, 0xc3, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0x40}, {@broadcast, 0x9}, {@remote, 0x400}]}, @lsrr={0x83, 0x23, 0xf, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0xd}]}, @end, @ssrr={0x89, 0x1f, 0x29, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast1, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2]}, @lsrr={0x83, 0x2b, 0x42, [@broadcast, @dev={0xac, 0x14, 0x14, 0xf}, @broadcast, @rand_addr=0x64010102, @local, @empty, @empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}}}}) 00:22:30 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 00:22:30 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000000)={'sit0\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r0, r0, 0x2, 0xeb, &(0x7f0000000040)="533378a4b8fb151c29b6e93dffaa462856d0aee6ac974988fd1cdf4df8603e151b1127c895d74b7071fbc3fb8eb95fedccc7ed9b9d644856e47df271559f4a359c83113e171af603095f8ffb3e7b036f4ed7cd049a2e6df1b97aa3102441137599bb0f0a5fff0c141f016979af9844603e636487ec26c7e42ff655dd128acdc367bafac9c9934fcf8bd5c6ecbe0dfe1988aa5d352b5c00b8265911d6b4f6fd3df16475815989d2b445af4b46af07797c28599f99af00cc47fc877f5287bd38f5810f035809b382ff7ead72b811bb615d380dabfb4c52998dbc78b144df22285a9ee8dabcd9afe5e1e50345", 0x0, 0x1, 0x1, 0x2, 0x2fd2, 0x0, 0x86a, 'syz1\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000240)={0x80000000, r2, 0x1dcd00c2d832699b}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r3) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r3) 00:22:30 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x2000000) 00:22:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 00:22:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff03, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x400}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000011}, 0x4081) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff03, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x400}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000011}, 0x4081) (async) 00:22:31 executing program 3: r0 = gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet(0x2, 0x3, 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c102650ab5b907267c1b3b5c7043f88082daf861ceedf4f003c61ecb0fc3457fdc03dc8fdb0d238ecd4c51f8a25008a4af215f10b30c400"/75, @ANYRES32=0x0, @ANYBLOB="00800010000000030000f5c34e71003800660000052f9078640101000a0101008616000000010510c44d6d736f230e0bc3dc7b6dfd05440cd620000000080001000001014eb7b28511c7f23a799bdb4c00c5aac84c61d72a04cdae199c71e8606652e02897491f6cee94265bab8c54eef7cc3a45c1c42f6c00e109e8fe3e53b11db429b769a5eadc82afd72f844dc4ec426d133f147263ab3898b740259e531ae3786888f75210221571944920a55605b2af489810dfd14b0d3100d050a9"]}) (async) pidfd_open(r0, 0x0) 00:22:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:31 executing program 1: r0 = gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet(0x2, 0x3, 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c102650ab5b907267c1b3b5c7043f88082daf861ceedf4f003c61ecb0fc3457fdc03dc8fdb0d238ecd4c51f8a25008a4af215f10b30c400"/75, @ANYRES32=0x0, @ANYBLOB="00800010000000030000f5c34e71003800660000052f9078640101000a0101008616000000010510c44d6d736f230e0bc3dc7b6dfd05440cd620000000080001000001014eb7b28511c7f23a799bdb4c00c5aac84c61d72a04cdae199c71e8606652e02897491f6cee94265bab8c54eef7cc3a45c1c42f6c00e109e8fe3e53b11db429b769a5eadc82afd72f844dc4ec426d133f147263ab3898b740259e531ae3786888f75210221571944920a55605b2af489810dfd14b0d3100d050a9"]}) pidfd_open(r0, 0x0) 00:22:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 00:22:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x40, 0x7, 0x2, 0x5, {{0x2b, 0x4, 0x0, 0x3, 0xac, 0x67, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0x24, 0xc3, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0x40}, {@broadcast, 0x9}, {@remote, 0x400}]}, @lsrr={0x83, 0x23, 0xf, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0xd}]}, @end, @ssrr={0x89, 0x1f, 0x29, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast1, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2]}, @lsrr={0x83, 0x2b, 0x42, [@broadcast, @dev={0xac, 0x14, 0x14, 0xf}, @broadcast, @rand_addr=0x64010102, @local, @empty, @empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}}}}) 00:22:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r5, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xfd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r8, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="29edfa7f89b6103d8835e1cd2e1913d1", @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) 00:22:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:31 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x1, 0x2, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:31 executing program 3: r0 = gettid() (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) socket$l2tp(0x2, 0x2, 0x73) (async) r2 = socket$inet(0x2, 0x3, 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c102650ab5b907267c1b3b5c7043f88082daf861ceedf4f003c61ecb0fc3457fdc03dc8fdb0d238ecd4c51f8a25008a4af215f10b30c400"/75, @ANYRES32=0x0, @ANYBLOB="00800010000000030000f5c34e71003800660000052f9078640101000a0101008616000000010510c44d6d736f230e0bc3dc7b6dfd05440cd620000000080001000001014eb7b28511c7f23a799bdb4c00c5aac84c61d72a04cdae199c71e8606652e02897491f6cee94265bab8c54eef7cc3a45c1c42f6c00e109e8fe3e53b11db429b769a5eadc82afd72f844dc4ec426d133f147263ab3898b740259e531ae3786888f75210221571944920a55605b2af489810dfd14b0d3100d050a9"]}) (async) pidfd_open(r0, 0x0) 00:22:31 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x1, 0x2, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x40, 0x7, 0x2, 0x5, {{0x2b, 0x4, 0x0, 0x3, 0xac, 0x67, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1, {[@timestamp_addr={0x44, 0x24, 0xc3, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0x40}, {@broadcast, 0x9}, {@remote, 0x400}]}, @lsrr={0x83, 0x23, 0xf, [@loopback, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0xd}]}, @end, @ssrr={0x89, 0x1f, 0x29, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @multicast1, @multicast2, @multicast2, @rand_addr=0x64010101, @multicast2]}, @lsrr={0x83, 0x2b, 0x42, [@broadcast, @dev={0xac, 0x14, 0x14, 0xf}, @broadcast, @rand_addr=0x64010102, @local, @empty, @empty, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}}}}) 00:22:31 executing program 1: r0 = gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet(0x2, 0x3, 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c102650ab5b907267c1b3b5c7043f88082daf861ceedf4f003c61ecb0fc3457fdc03dc8fdb0d238ecd4c51f8a25008a4af215f10b30c400"/75, @ANYRES32=0x0, @ANYBLOB="00800010000000030000f5c34e71003800660000052f9078640101000a0101008616000000010510c44d6d736f230e0bc3dc7b6dfd05440cd620000000080001000001014eb7b28511c7f23a799bdb4c00c5aac84c61d72a04cdae199c71e8606652e02897491f6cee94265bab8c54eef7cc3a45c1c42f6c00e109e8fe3e53b11db429b769a5eadc82afd72f844dc4ec426d133f147263ab3898b740259e531ae3786888f75210221571944920a55605b2af489810dfd14b0d3100d050a9"]}) pidfd_open(r0, 0x0) 00:22:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x91116a7108974dc3, 0x5, 0x0, 0xf}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x100000000000011e, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 00:22:31 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x1, 0x2, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r5, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xfd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r8, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="29edfa7f89b6103d8835e1cd2e1913d1", @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r5, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xfd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r8, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x38}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="29edfa7f89b6103d8835e1cd2e1913d1", @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) (async) 00:22:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (rerun: 32) 00:22:31 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x70) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='-}-@:\x00', &(0x7f0000000040)='%]&}\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:31 executing program 1: r0 = gettid() r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet(0x2, 0x3, 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c102650ab5b907267c1b3b5c7043f88082daf861ceedf4f003c61ecb0fc3457fdc03dc8fdb0d238ecd4c51f8a25008a4af215f10b30c400"/75, @ANYRES32=0x0, @ANYBLOB="00800010000000030000f5c34e71003800660000052f9078640101000a0101008616000000010510c44d6d736f230e0bc3dc7b6dfd05440cd620000000080001000001014eb7b28511c7f23a799bdb4c00c5aac84c61d72a04cdae199c71e8606652e02897491f6cee94265bab8c54eef7cc3a45c1c42f6c00e109e8fe3e53b11db429b769a5eadc82afd72f844dc4ec426d133f147263ab3898b740259e531ae3786888f75210221571944920a55605b2af489810dfd14b0d3100d050a9"]}) pidfd_open(r0, 0x0) 00:22:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) 00:22:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1f, 0x5, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="77501568", &(0x7f0000000080)=@udp=r1, 0x2}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:31 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x70) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='-}-@:\x00', &(0x7f0000000040)='%]&}\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='-}-@:\x00', &(0x7f0000000040)='%]&}\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xa, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair(0x1f, 0x5, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="77501568", &(0x7f0000000080)=@udp=r1, 0x2}, 0x20) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r5, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xfd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r5, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xfd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r8, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x38}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r8, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="29edfa7f89b6103d8835e1cd2e1913d1", @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) 00:22:31 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x70) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='-}-@:\x00', &(0x7f0000000040)='%]&}\x00', 0x0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (rerun: 32) 00:22:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:31 executing program 1: gettid() r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$inet(0x2, 0x3, 0x3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="73797a746e6c102650ab5b907267c1b3b5c7043f88082daf861ceedf4f003c61ecb0fc3457fdc03dc8fdb0d238ecd4c51f8a25008a4af215f10b30c400"/75, @ANYRES32=0x0, @ANYBLOB="00800010000000030000f5c34e71003800660000052f9078640101000a0101008616000000010510c44d6d736f230e0bc3dc7b6dfd05440cd620000000080001000001014eb7b28511c7f23a799bdb4c00c5aac84c61d72a04cdae199c71e8606652e02897491f6cee94265bab8c54eef7cc3a45c1c42f6c00e109e8fe3e53b11db429b769a5eadc82afd72f844dc4ec426d133f147263ab3898b740259e531ae3786888f75210221571944920a55605b2af489810dfd14b0d3100d050a9"]}) 00:22:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair(0x1f, 0x5, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000)="77501568", &(0x7f0000000080)=@udp=r1, 0x2}, 0x20) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'ip_vti0\x00', 0x0}) 00:22:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = gettid() r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000047c8007456772b33f134c4b8f0833d9c57318f95f6d1a4615597cf376c103b4dc55a81152ff5d428c94a0d35520f58d9989076fd08fe9da8be21525276e3c4fa1d2bbe91996007b4d42ec65f9560ddb3f7f200000000000000013cf21dc8c069758cf18f4e581fea35c588b74c2a1bf154e05656c0e1bb37f9cc3d658b6262104efdd6c646a0cd48851401270fcdf36ff0b63698455eba0d65bf437d3f3cf8b78bbd445e0a97e9ff5ccad8ca896beacbd4c1b727db7516923f936408e", @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r6, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001) 00:22:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:31 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x7, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x7, 0x6, 0x7, 0x10, 0x1}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, @loopback, 0x18, 0x12}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (rerun: 32) 00:22:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x6, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = gettid() (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) (async, rerun: 32) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/time_for_children\x00') (async, rerun: 32) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000047c8007456772b33f134c4b8f0833d9c57318f95f6d1a4615597cf376c103b4dc55a81152ff5d428c94a0d35520f58d9989076fd08fe9da8be21525276e3c4fa1d2bbe91996007b4d42ec65f9560ddb3f7f200000000000000013cf21dc8c069758cf18f4e581fea35c588b74c2a1bf154e05656c0e1bb37f9cc3d658b6262104efdd6c646a0cd48851401270fcdf36ff0b63698455eba0d65bf437d3f3cf8b78bbd445e0a97e9ff5ccad8ca896beacbd4c1b727db7516923f936408e", @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r6, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001) 00:22:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, @loopback, 0x18, 0x12}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, @loopback, 0x18, 0x12}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:32 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r5, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xfd}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r8, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="29edfa7f89b6103d8835e1cd2e1913d1", @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) 00:22:32 executing program 1: gettid() r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) socket$inet(0x2, 0x3, 0x3) 00:22:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = gettid() r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/time_for_children\x00') sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000047c8007456772b33f134c4b8f0833d9c57318f95f6d1a4615597cf376c103b4dc55a81152ff5d428c94a0d35520f58d9989076fd08fe9da8be21525276e3c4fa1d2bbe91996007b4d42ec65f9560ddb3f7f200000000000000013cf21dc8c069758cf18f4e581fea35c588b74c2a1bf154e05656c0e1bb37f9cc3d658b6262104efdd6c646a0cd48851401270fcdf36ff0b63698455eba0d65bf437d3f3cf8b78bbd445e0a97e9ff5ccad8ca896beacbd4c1b727db7516923f936408e", @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r6, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) gettid() (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) (async) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/time_for_children\x00') (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000047c8007456772b33f134c4b8f0833d9c57318f95f6d1a4615597cf376c103b4dc55a81152ff5d428c94a0d35520f58d9989076fd08fe9da8be21525276e3c4fa1d2bbe91996007b4d42ec65f9560ddb3f7f200000000000000013cf21dc8c069758cf18f4e581fea35c588b74c2a1bf154e05656c0e1bb37f9cc3d658b6262104efdd6c646a0cd48851401270fcdf36ff0b63698455eba0d65bf437d3f3cf8b78bbd445e0a97e9ff5ccad8ca896beacbd4c1b727db7516923f936408e", @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r6, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x13}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000001) (async) 00:22:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@empty, @loopback, 0x18, 0x12}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:32 executing program 2: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x8, 0xffffffffffffffff}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) r2 = gettid() syz_open_procfs$namespace(r2, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x200240c4}, 0x24040090) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000040)={'syztnl1\x00', 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xc, 0xaf4, 0xc8a0, 0x5, 0x402, 0x1, 0x44, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) 00:22:32 executing program 1: gettid() r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8903, &(0x7f0000000180)={'syztnl2\x00', 0x0}) socket$inet(0x2, 0x3, 0x3) 00:22:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000080), &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000040)={'syztnl1\x00', 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xc, 0xaf4, 0xc8a0, 0x5, 0x402, 0x1, 0x44, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) 00:22:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r10, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004840}, 0x200400d0) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) 00:22:32 executing program 2: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x8, 0xffffffffffffffff}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) r2 = gettid() syz_open_procfs$namespace(r2, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x200240c4}, 0x24040090) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x2e0, 0x0, {{0x1c, 0x4, 0x1, 0x0, 0x70, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x4c, 0x32, 0x1, 0x3, [{@multicast2, 0x5}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xffffffff}, {@private=0xa010100, 0x8}, {@multicast2, 0x7fff}, {@multicast1, 0x4}, {@private=0xa010102, 0x4}, {@private=0xa010100, 0x4cf3}]}, @generic={0x44, 0xf, "91d15b9842478cb55b2dfcddb5"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', r2, 0x10, 0x8000, 0xd11, 0x1, {{0x10, 0x4, 0x3, 0x12, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x24, 0x0, 0x7, [0x8001, 0x0, 0x2, 0xffff, 0x30ce, 0x0]}, @rr={0x7, 0xf, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}]}}}}}) 00:22:32 executing program 1: gettid() socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x3, 0x3) 00:22:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000080), &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:32 executing program 2: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x8, 0xffffffffffffffff}) (async) r1 = fsmount(0xffffffffffffffff, 0x0, 0x80) (async) r2 = gettid() syz_open_procfs$namespace(r2, 0x0) (async, rerun: 32) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x200240c4}, 0x24040090) (rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000040)={'syztnl1\x00', 0x0}) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xc, 0xaf4, 0xc8a0, 0x5, 0x402, 0x1, 0x44, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) 00:22:32 executing program 1: gettid() socket$inet(0x2, 0x3, 0x3) 00:22:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000080), &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'erspan0\x00', 0x0}) 00:22:32 executing program 1: socket$inet(0x2, 0x3, 0x3) 00:22:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)="2511cd80a177fb21df25bec44f5ba323ab36061444a4b68cacb3f4c3ea12fcc61a502e531522f433a347ade5fd8c5c1616c9ff1729474b37f0665515425317f559b81e30bda8", &(0x7f0000000080)=@udp, 0x4}, 0x20) 00:22:32 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r10, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004840}, 0x200400d0) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) 00:22:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x2e0, 0x0, {{0x1c, 0x4, 0x1, 0x0, 0x70, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x4c, 0x32, 0x1, 0x3, [{@multicast2, 0x5}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xffffffff}, {@private=0xa010100, 0x8}, {@multicast2, 0x7fff}, {@multicast1, 0x4}, {@private=0xa010102, 0x4}, {@private=0xa010100, 0x4cf3}]}, @generic={0x44, 0xf, "91d15b9842478cb55b2dfcddb5"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', r2, 0x10, 0x8000, 0xd11, 0x1, {{0x10, 0x4, 0x3, 0x12, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x24, 0x0, 0x7, [0x8001, 0x0, 0x2, 0xffff, 0x30ce, 0x0]}, @rr={0x7, 0xf, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}]}}}}}) 00:22:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'erspan0\x00', 0x0}) 00:22:32 executing program 1: socket$inet(0x2, 0x0, 0x3) 00:22:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)="2511cd80a177fb21df25bec44f5ba323ab36061444a4b68cacb3f4c3ea12fcc61a502e531522f433a347ade5fd8c5c1616c9ff1729474b37f0665515425317f559b81e30bda8", &(0x7f0000000080)=@udp, 0x4}, 0x20) 00:22:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f0000000100)='GPL\x00', 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'erspan0\x00', 0x0}) 00:22:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)="2511cd80a177fb21df25bec44f5ba323ab36061444a4b68cacb3f4c3ea12fcc61a502e531522f433a347ade5fd8c5c1616c9ff1729474b37f0665515425317f559b81e30bda8", &(0x7f0000000080)=@udp, 0x4}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)="2511cd80a177fb21df25bec44f5ba323ab36061444a4b68cacb3f4c3ea12fcc61a502e531522f433a347ade5fd8c5c1616c9ff1729474b37f0665515425317f559b81e30bda8", &(0x7f0000000080)=@udp, 0x4}, 0x20) (async) 00:22:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], 0x0, 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r10, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004840}, 0x200400d0) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) 00:22:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r10, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x38}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004840}, 0x200400d0) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="3fc10000000000000000090000000800010000000000"], 0x1c}}, 0x0) 00:22:32 executing program 1: socket$inet(0x2, 0x0, 0x3) 00:22:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8906, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x700, 0x7800, 0x2e0, 0x0, {{0x1c, 0x4, 0x1, 0x0, 0x70, 0x64, 0x0, 0x9, 0x2f, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x25}, {[@timestamp_addr={0x44, 0x4c, 0x32, 0x1, 0x3, [{@multicast2, 0x5}, {@rand_addr=0x64010100, 0x1}, {@local, 0x1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0xffffffff}, {@private=0xa010100, 0x8}, {@multicast2, 0x7fff}, {@multicast1, 0x4}, {@private=0xa010102, 0x4}, {@private=0xa010100, 0x4cf3}]}, @generic={0x44, 0xf, "91d15b9842478cb55b2dfcddb5"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'erspan0\x00', r2, 0x10, 0x8000, 0xd11, 0x1, {{0x10, 0x4, 0x3, 0x12, 0x40, 0x65, 0x0, 0x7, 0x4, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x24, 0x0, 0x7, [0x8001, 0x0, 0x2, 0xffff, 0x30ce, 0x0]}, @rr={0x7, 0xf, 0x85, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}]}}}}}) 00:22:32 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], 0x0, 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) (async) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:22:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, r1, 0x9951b0c00479c13f, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c800) 00:22:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], 0x0, 0x59, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) (async) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) (async, rerun: 32) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4) (rerun: 32) 00:22:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f0000000100)='GPL\x00', 0x0, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, r1, 0x9951b0c00479c13f, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, r1, 0x9951b0c00479c13f, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c800) (async) 00:22:33 executing program 1: socket$inet(0x2, 0x0, 0x3) 00:22:33 executing program 2: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) inotify_init1(0x80800) 00:22:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0x1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x20}}) 00:22:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x80, 0x0, [{@broadcast}, {@multicast2}, {@multicast1}, {@empty}, {@local}, {@loopback}, {@multicast1}, {@loopback}]}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x77777777}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000200)=[0x0, r8, r7, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000340)=r5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x8902, &(0x7f0000000140)={'gretap0\x00', 0x0}) 00:22:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:33 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x14, r1, 0x9951b0c00479c13f, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c800) 00:22:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0x1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x20}}) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0x1}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x20}}) (async) 00:22:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x80, 0x0, [{@broadcast}, {@multicast2}, {@multicast1}, {@empty}, {@local}, {@loopback}, {@multicast1}, {@loopback}]}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x77777777}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000200)=[0x0, r8, r7, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000340)=r5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x8902, &(0x7f0000000140)={'gretap0\x00', 0x0}) 00:22:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1a0228bd7000fbdbdf25200000003c002b800800030003000008080003000100000008000200010000000800030002000000080002000000000005000400010000000800030006000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000841}, 0x40008c5) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="3fc100000056b46f43bf58ee6532a39f6ff62e3ed31f0000000009000000080001000000000064526d0af6f3c04dc06c21debd0de415421e81035b8656a666b37561bdcf8ce8c2294ac4b212d31693ea70907b1f8847df0596569d8bc85f1d3e176a4547f362b12213baedf5159e71e97812450dcc731ebcc6eb14eb1a7c4c3ca711d98ac62360c48945478397085f5e1f004ad12d590adeaa4956cb"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fffffff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7138}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) socketpair(0x1, 0x2, 0x2d1, &(0x7f0000000180)) 00:22:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:33 executing program 1: socket$inet(0x2, 0x3, 0x0) 00:22:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x80, 0x0, [{@broadcast}, {@multicast2}, {@multicast1}, {@empty}, {@local}, {@loopback}, {@multicast1}, {@loopback}]}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x77777777}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000200)=[0x0, r8, r7, 0x0, 0x0], 0x5, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000340)=r5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x8902, &(0x7f0000000140)={'gretap0\x00', 0x0}) 00:22:33 executing program 2: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) inotify_init1(0x80800) 00:22:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1a0228bd7000fbdbdf25200000003c002b800800030003000008080003000100000008000200010000000800030002000000080002000000000005000400010000000800030006000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000841}, 0x40008c5) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="3fc100000056b46f43bf58ee6532a39f6ff62e3ed31f0000000009000000080001000000000064526d0af6f3c04dc06c21debd0de415421e81035b8656a666b37561bdcf8ce8c2294ac4b212d31693ea70907b1f8847df0596569d8bc85f1d3e176a4547f362b12213baedf5159e71e97812450dcc731ebcc6eb14eb1a7c4c3ca711d98ac62360c48945478397085f5e1f004ad12d590adeaa4956cb"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fffffff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7138}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) socketpair(0x1, 0x2, 0x2d1, &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1a0228bd7000fbdbdf25200000003c002b800800030003000008080003000100000008000200010000000800030002000000080002000000000005000400010000000800030006000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000841}, 0x40008c5) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="3fc100000056b46f43bf58ee6532a39f6ff62e3ed31f0000000009000000080001000000000064526d0af6f3c04dc06c21debd0de415421e81035b8656a666b37561bdcf8ce8c2294ac4b212d31693ea70907b1f8847df0596569d8bc85f1d3e176a4547f362b12213baedf5159e71e97812450dcc731ebcc6eb14eb1a7c4c3ca711d98ac62360c48945478397085f5e1f004ad12d590adeaa4956cb"], 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fffffff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7138}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000040) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) (async) socketpair(0x1, 0x2, 0x2d1, &(0x7f0000000180)) (async) 00:22:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0x1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8901, &(0x7f0000000180)={'syztnl2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x20}}) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x8, 0x20}}) 00:22:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0x6, 0xffffd402, 0x1ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x80, 0x0, [{@broadcast}, {@multicast2}, {@multicast1}, {@empty}, {@local}, {@loopback}, {@multicast1}, {@loopback}]}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x77777777}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000200)=[0x0, r8, r7, 0x0, 0x0], 0x5, 0x80000}) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000340)=r5) 00:22:33 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1a0228bd7000fbdbdf25200000003c002b800800030003000008080003000100000008000200010000000800030002000000080002000000000005000400010000000800030006000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000841}, 0x40008c5) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1a0228bd7000fbdbdf25200000003c002b800800030003000008080003000100000008000200010000000800030002000000080002000000000005000400010000000800030006000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000841}, 0x40008c5) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="3fc100000056b46f43bf58ee6532a39f6ff62e3ed31f0000000009000000080001000000000064526d0af6f3c04dc06c21debd0de415421e81035b8656a666b37561bdcf8ce8c2294ac4b212d31693ea70907b1f8847df0596569d8bc85f1d3e176a4547f362b12213baedf5159e71e97812450dcc731ebcc6eb14eb1a7c4c3ca711d98ac62360c48945478397085f5e1f004ad12d590adeaa4956cb"], 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7fffffff}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7138}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00'}) socketpair(0x1, 0x2, 0x2d1, &(0x7f0000000180)) 00:22:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:33 executing program 0: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) inotify_init1(0x80800) 00:22:33 executing program 2: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) inotify_init1(0x80800) 00:22:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r6, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x80, 0x0, [{@broadcast}, {@multicast2}, {@multicast1}, {@empty}, {@local}, {@loopback}, {@multicast1}, {@loopback}]}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x77777777}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000200)=[0x0, r8, r7, 0x0, 0x0], 0x5, 0x80000}) 00:22:33 executing program 1: socket$inet(0x2, 0x3, 0x0) 00:22:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000002c0)=[{0x1, 0x3, 0x5, 0xa}, {0x5, 0x3, 0x10, 0x2}, {0x3, 0x4, 0x0, 0x4}, {0x1, 0x1, 0xa, 0x2}, {0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0xf, 0x1}, {0x3, 0x3, 0xf}, {0x0, 0x2, 0x9, 0xc}]}, 0x90) 00:22:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x80, 0x0, [{@broadcast}, {@multicast2}, {@multicast1}, {@empty}, {@local}, {@loopback}, {@multicast1}, {@loopback}]}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x0, 0x77777777}) 00:22:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f00000000c0)=""/207, &(0x7f0000000040)=0xcf) 00:22:33 executing program 0: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) inotify_init1(0x80800) 00:22:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000080)=@raw=[@cb_func], &(0x7f0000000100)='GPL\x00'}, 0x90) 00:22:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x80, 0x0, [{@broadcast}, {@multicast2}, {@multicast1}, {@empty}, {@local}, {@loopback}, {@multicast1}, {@loopback}]}}) 00:22:33 executing program 2: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) inotify_init1(0x80800) 00:22:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f00000000c0)=""/207, &(0x7f0000000040)=0xcf) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) (async) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f00000000c0)=""/207, &(0x7f0000000040)=0xcf) (async) 00:22:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)) 00:22:33 executing program 4: socket$inet(0x2, 0x3, 0x0) 00:22:33 executing program 1: socket$inet(0x2, 0x3, 0x0) 00:22:33 executing program 2: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) 00:22:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x2, &(0x7f00000000c0)=""/207, &(0x7f0000000040)=0xcf) 00:22:33 executing program 0: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) inotify_init1(0x80800) 00:22:33 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)) 00:22:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x70bd28, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 00:22:34 executing program 0: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) 00:22:34 executing program 2: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) 00:22:34 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)) 00:22:34 executing program 4: socket$inet(0x2, 0x3, 0x0) 00:22:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x70bd28, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) [ 1354.144993][T21130] list_del corruption. prev->next should be ffff0000fbeea828, but was ffff80001602e020. (prev=ffff80001602e020) 00:22:34 executing program 1: r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001dc0)={0x0}) fsmount(r1, 0x0, 0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, 0xc0c0c0c0}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x25, 0x6, @void}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000001dc0)={0x0}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @link_fd=r3}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2000260000000500ec5a7b37dd0d9fbb7d9b6db4f32bbc8da07a4d52b9f5134b07d33058580dc0a4756f94637a941f2eb95608a3751442296905ac8d59dc9ee6a2b4405c895cf5fcc11d7ec6f1ca3afb5bc9dc529484124829cdd4"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x8904, &(0x7f0000000180)={'syztnl2\x00', 0x0}) pidfd_open(0x0, 0x0) [ 1354.171131][T21130] ------------[ cut here ]------------ [ 1354.172310][T21130] kernel BUG at lib/list_debug.c:61! [ 1354.173533][T21130] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 1354.175313][T21130] Modules linked in: [ 1354.176188][T21130] CPU: 1 PID: 21130 Comm: syz-executor.0 Not tainted 6.1.57-syzkaller #0 [ 1354.178065][T21130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 1354.180372][T21130] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 1354.182217][T21130] pc : __list_del_entry_valid+0x13c/0x158 [ 1354.183767][T21130] lr : __list_del_entry_valid+0x13c/0x158 [ 1354.185162][T21130] sp : ffff80002ce577b0 [ 1354.186112][T21130] x29: ffff80002ce577b0 x28: 1fffe0001b2e268f x27: 1fffe0001b2e2685 [ 1354.187901][T21130] x26: ffff0000d9713428 x25: ffff0000c04d1950 x24: ffff0000d3110828 [ 1354.189730][T21130] x23: dfff800000000000 x22: dfff800000000000 x21: ffff80001602e020 [ 1354.191654][T21130] x20: ffff0000d3110828 x19: ffff0000fbeea828 x18: 1fffe000368adf76 [ 1354.193542][T21130] x17: ffff8000158ad000 x16: ffff80001212adac x15: ffff0001b456fbbc [ 1354.195309][T21130] x14: 1ffff00002b160b0 x13: dfff800000000000 x12: 0000000000000001 [ 1354.197069][T21130] x11: ff808000083467a8 x10: 0000000000000000 x9 : aaeb12fdcd832300 [ 1354.198926][T21130] x8 : aaeb12fdcd832300 x7 : ffff80000827db20 x6 : 0000000000000000 00:22:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x70bd28, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r1, 0x9951b0c00479c13f, 0x70bd28, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) [ 1354.200708][T21130] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000aa8562c [ 1354.202544][T21130] x2 : ffff0001b456fcd0 x1 : 0000000100000000 x0 : 000000000000006d [ 1354.204398][T21130] Call trace: [ 1354.205156][T21130] __list_del_entry_valid+0x13c/0x158 [ 1354.206379][T21130] efivar_entry_remove+0x38/0x110 [ 1354.207495][T21130] efivarfs_destroy+0x20/0x3c [ 1354.208547][T21130] efivar_entry_iter+0x94/0xdc [ 1354.209597][T21130] efivarfs_kill_sb+0x38/0x48 00:22:34 executing program 4: socket$inet(0x2, 0x3, 0x0) [ 1354.210572][T21130] deactivate_locked_super+0xac/0x124 [ 1354.211798][T21130] deactivate_super+0xf0/0x110 [ 1354.212894][T21130] put_fs_context+0x88/0x790 [ 1354.213967][T21130] fscontext_release+0x64/0x84 [ 1354.215108][T21130] __fput+0x30c/0x7bc [ 1354.216000][T21130] ____fput+0x20/0x30 [ 1354.216853][T21130] task_work_run+0x240/0x2f0 [ 1354.217860][T21130] do_notify_resume+0x2148/0x3474 [ 1354.218954][T21130] el0_svc+0x9c/0x168 [ 1354.219865][T21130] el0t_64_sync_handler+0x84/0xf0 [ 1354.221062][T21130] el0t_64_sync+0x18c/0x190 [ 1354.222083][T21130] Code: 911d8000 aa1303e1 aa1503e3 95d8d13d (d4210000) [ 1354.223673][T21130] ---[ end trace 0000000000000000 ]--- 00:22:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r2) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r4, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r1, 0x9951b0c00479c13f}, 0x14}}, 0x24040858) 00:22:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r2) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8810}, 0x40) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r4, 0x9951b0c00479c13f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r1, 0x9951b0c00479c13f}, 0x14}}, 0x24040858) 00:22:34 executing program 4: socket$inet(0x2, 0x0, 0x0) 00:22:34 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000001dc0)={0x0}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x1b, 0x5, 0x3c0, 0x280, 0x338, 0xffffffff, 0x188, 0x0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "32a4"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @empty, @icmp_id, @gre_key}}}}, {{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_bridge\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "8f89"}}, @common=@ttl={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port, @gre_key}}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth0_vlan\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @local}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001ac0), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001cc0)={'syztnl0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x180000}) socketpair(0xb, 0xb, 0x1f, &(0x7f00000000c0)) [ 1354.726638][T21130] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 1354.728210][T21130] SMP: stopping secondary CPUs [ 1354.729238][T21130] Kernel Offset: disabled [ 1354.730168][T21130] CPU features: 0x00000,02070084,26017203 [ 1354.731491][T21130] Memory Limit: none [ 1355.233981][T21130] Rebooting in 86400 seconds..