Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. 2020/11/23 11:31:02 fuzzer started 2020/11/23 11:31:03 dialing manager at 10.128.0.105:35653 2020/11/23 11:31:08 syscalls: 200 2020/11/23 11:31:08 code coverage: enabled 2020/11/23 11:31:08 comparison tracing: enabled 2020/11/23 11:31:08 extra coverage: extra coverage is not supported by the kernel 2020/11/23 11:31:08 setuid sandbox: enabled 2020/11/23 11:31:08 namespace sandbox: enabled 2020/11/23 11:31:08 Android sandbox: /sys/fs/selinux/policy does not exist 2020/11/23 11:31:08 fault injection: enabled 2020/11/23 11:31:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/11/23 11:31:08 net packet injection: enabled 2020/11/23 11:31:08 net device setup: enabled 2020/11/23 11:31:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/11/23 11:31:08 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/11/23 11:31:08 USB emulation: /dev/raw-gadget does not exist 2020/11/23 11:31:08 hci packet injection: enabled 2020/11/23 11:31:08 wifi device emulation: enabled 11:31:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x8, 0x101, 0x6, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8007, 0x80, 0x0, 0x9}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair(0x4, 0xa, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', r1, 0x29, 0x4, 0xc7, 0x0, 0x6a, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x8080, 0x400}}) r4 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000003c0)={0x0, 0x3e6, 0x61, [], &(0x7f0000000380)=0x3}) clock_gettime(0x2, &(0x7f0000000400)) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000440)) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000580)=0x5) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000005c0)) getpid() sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20011) 11:31:08 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x4000, 0x3, {r0, r1/1000+10000}, {0x2, 0x2, 0x9f, 0x9, 0x3, 0x6, "079f3dbe"}, 0x7, 0x2, @offset=0xc42, 0x7, 0x0, 0xffffffffffffffff}) r3 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000080) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, {0xd6, 0x0, 0x41, 0x26}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000540)={0x8, 0xa, &(0x7f0000000480)="47811b8504214adc0d95e80a8469a4b58a1835090f9e54b9380dde63e7cc5d55543464ebea88d2c6f72a621319439eca3d13d0d4336fea65f0880f603971e51ffc231c44098e04d989c7ea33030bffcd4aae11bb8800fec1bfe8d8edbd080e8eec5e728692a14a04201eddd483628a3ac592d7bed731544d3c52f63ad1897440802501bf8bd6f39580d6f0df4cd07938e24bcd5f3f08eb09eca00d553c751f3f08ba315877fd208b464fbfb9ce41e02f0902b5d3cf40ac034c3148", {0x6, 0x5, 0x30314752, 0x3, 0x8, 0x5568, 0x5, 0xfffffffe}}) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000580)) accept4$phonet_pipe(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80000) connect$phonet_pipe(r3, &(0x7f0000000640)={0x23, 0x1, 0x0, 0x80}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f00000006c0)) pselect6(0x40, &(0x7f0000000700)={0x1dd, 0x7, 0x3f, 0x3, 0x4, 0x401, 0x200800000000000, 0x5}, &(0x7f0000000740)={0x9, 0x5, 0xfff, 0x3, 0x7, 0x4, 0x200, 0xffffffff00000000}, &(0x7f0000000780)={0x9, 0x5, 0x5, 0xd0, 0x3d9, 0x101, 0x1f, 0x5}, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800)={[0x3]}, 0x8}) r6 = syz_open_dev$radio(&(0x7f0000000880)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000008c0)=0x7) r7 = syz_open_dev$radio(&(0x7f0000000900)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r7, 0x80085617, &(0x7f0000000940)) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000980)={0x7, 0x34343452, 0x2, @discrete={0x6, 0x8}}) 11:31:08 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = eventfd2(0x80, 0x800) write$eventfd(r0, &(0x7f0000000040)=0x8af, 0x8) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)=""/234, &(0x7f0000000180)=0xea) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x4e, 0x800, 0x2, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = accept(r1, 0x0, &(0x7f0000000680)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2f}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x261}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x38}}, 0x44040054) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000800)={0x1f, "b56b8f63a5e9885f56f46b40d3adfc24de80153f67be0ac7796ec3e470795d0a", 0x1}) write$eventfd(r0, &(0x7f0000000840)=0x1, 0x8) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000880)={0x7, 0x3, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x2, 0x1, 0x3f, 0x7f, 0x0, 0x50, "e3fa50b8"}, 0x8000, 0x3, @userptr=0x3, 0x8000}) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000900)) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000c40)={&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/246, 0xf6}, {&(0x7f0000000ac0)=""/73, 0x49}, {&(0x7f0000000b40)=""/61, 0x3d}, {&(0x7f0000000b80)=""/114, 0x72}], 0x4}, 0x142) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000c80)={0x1, 0x0, {0x7, 0x9, 0xe04, 0xfffffbff}}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000cc0)='net_prio.ifpriomap\x00', 0x2, 0x0) socketpair(0x2b, 0x80000, 0x2, &(0x7f0000000d00)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf8, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0x200c8481) 11:31:09 executing program 3: socketpair(0x29, 0xab4e7e39796e6e6, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x404809d) recvmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1, &(0x7f00000002c0)=""/32, 0x20}, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000540)={0xa2e5, 0x2, 0x4, 0x70000, 0x0, {0x0, 0x2710}, {0x2, 0x0, 0xe5, 0x1, 0x0, 0x2, "11422f95"}, 0x200, 0x3, @planes=&(0x7f0000000500)={0x4, 0x5, @mem_offset=0x1e, 0x101}, 0x3c9f}) socketpair(0xf, 0x0, 0x1000, &(0x7f0000001a00)={0xffffffffffffffff}) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000001a40)=0x1, 0x4) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0xb526835ac826e3fe) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl0\x00', r3, 0x2f, 0x0, 0x1, 0x8, 0x78, @empty, @empty, 0x700, 0x700, 0x1ff, 0x7}}) r8 = syz_open_dev$radio(&(0x7f0000001b40)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FBUF(r8, 0x8030560a, &(0x7f0000001c80)={0x20, 0x0, &(0x7f0000001b80)="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", {0x84, 0x6, 0x20385655, 0x8, 0x100, 0x2, 0x6, 0x2}}) ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f0000001cc0)={0x4, {0x0, 0x5, 0x9, 0x2}, {0x2d, 0x7, 0x175}, {0x4, 0x2}}) socket$inet_sctp(0x2, 0x1, 0x84) read$eventfd(r6, &(0x7f0000001d00), 0x8) getpeername(r2, &(0x7f0000001d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000001dc0)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001e80)={'syztnl0\x00', &(0x7f0000001e00)={'syztnl1\x00', r7, 0x4, 0x6, 0x4, 0x4, 0x4, @dev={0xfe, 0x80, [], 0x1d}, @mcast1, 0x80, 0x10, 0xfa41, 0x8}}) 11:31:09 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x18ce97bd1ff148fc) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pptp, &(0x7f0000000200)=0x80) r2 = accept$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000002c0)={0x8, 0x10001, @value=0xfe6}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000300)={0x3, {0x7f, 0x6, 0x1, 0x3}}) r3 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f00000003c0)={0x0, 0x200, 0x200, [], &(0x7f0000000380)=0x80}) r4 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, {0x6, 0x3, 0x80000000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r5, 0x29, 0x0, 0x8, 0x1, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x40, 0x89cb, 0x4}}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10000}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048010) getpeername(r2, &(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000c40)=0x80) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xac, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xac}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000e00)={0x0, @bt={0x4, 0xcf, 0x1, 0x1, 0x10000, 0x5, 0x6, 0x0, 0x1f, 0xffff, 0x759, 0x692d, 0x9, 0xff, 0x18, 0x5, {0x8257, 0x7fff}, 0xa4, 0x3f}}) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getpeername(r8, &(0x7f0000000ec0)=@generic, &(0x7f0000000f40)=0x80) 11:31:09 executing program 5: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x7fffffff, 0x8, 0x4, 0x4000, 0x1, {0x77359400}, {0x1, 0x2, 0x80, 0xff, 0x0, 0x1, "9a62b002"}, 0x4, 0x1, @userptr=0x6, 0x2}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0xc, @win={{0x5, 0x4, 0x9, 0x8}, 0x3, 0x2d, &(0x7f0000000340)={{0x0, 0x8, 0x1, 0x100}, &(0x7f0000000300)={{0xf2cf, 0x1092, 0x0, 0x7fff}, &(0x7f00000002c0)={{0x8, 0x1ff, 0x7f}}}}, 0x9, &(0x7f0000000380)="1329b539cf52ee8720306b5c5fe3e0536fdfb5c1b56c2052f9606b86e4083ac7eabbd4c582be425ce0203bababf7848fdffa24003f7cb1f557f485047cf81d3837cfd8e20b90ba64480bec99ef8955b2f06c8218556197da288bf26769ef86cd674747de3dbed3c62c78fa9bcf64ed264702fda91257aadc9022775c3c2edc2600a08cfdfb24848151269d6eed262d4adbc82f5cf7c41ccfd5a5eb96eb60752558c72d9e292bed845a2ba8e0fb5bb8dcfb45ed7dc589216bb8861018", 0x20}}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x184, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0xab, 0x5b, "123f9a74c27c27b1a76d355e824bbab5aa626b49adbd283e342c916b62871eb4737229ca3a581eb5c983cdbc269f3296511226fdc2cd475e9c418540eb8e0dcd7e5fa2977a5a574d7e1f208c22f481e0fa0b7dee1bd4cc6c17f9d73566c9b56a72ead5d5d3a98809f98e38e0089b96ddfb29142ca3c58a72fc02cdf6064d037cfbe8bef8a9658482e5f4cbeed044cd6a599d2be9bafedf53a809300e36fe278d75412931ddeb06"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffc1}, @NL80211_ATTR_FRAME_MATCH={0x9d, 0x5b, "cdee3ae02ef3aebceb719259eb66c29d13d2b46d8c5aa0da15be29f51b5bef6a136d80af547b7c011f7ff0d1bb7b6a474723bb4a7bef0b1cfe9c31ec4b91eb05de9f2b0a8938ffa39bff3451d86e4241a79289a4f3b5ce0bf8b55c662f0c1db7f16bfed097fef81e5ad6d5f9007281804ffa94c23b1424a88083f2e481db1cd9b3c4f910ac466f484bb1dabfd67ee07014d511d82e73ae3d38"}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000841) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x0) r3 = accept4$phonet_pipe(r2, &(0x7f00000009c0), &(0x7f0000000a00)=0x10, 0x80800) accept4$phonet_pipe(r3, &(0x7f0000000a40), &(0x7f0000000a80)=0x10, 0x80800) openat$userio(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/userio\x00', 0x8000, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000b00)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000b40)={0x4, 0x2, 0x3, {0x0, @pix_mp={0x8000, 0x0, 0x31364d4e, 0x3, 0x3, [{0x80, 0x8001}, {0x8001, 0x43c}, {0x4, 0x6}, {0x1, 0x1f}, {0x9}, {0x7, 0x40}, {0x1, 0x419f}, {0x8001, 0xfffffff7}], 0x7f, 0x81, 0x0, 0x0, 0x4}}, 0x4}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd92, 0x2}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = syz_open_dev$radio(&(0x7f0000000d80)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000dc0)={0xf4, 0x5, 0xfff, 0x0, 0x8, 0x20, 0x10001}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20040011) socket$pppoe(0x18, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x55}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x40040) [ 40.744761] IPVS: ftp: loaded support on port[0] = 21 [ 40.849890] chnl_net:caif_netlink_parms(): no params data found [ 40.924534] IPVS: ftp: loaded support on port[0] = 21 [ 40.985472] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.992922] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.999928] device bridge_slave_0 entered promiscuous mode [ 41.012564] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.018906] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.026628] device bridge_slave_1 entered promiscuous mode [ 41.093798] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.118198] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.131447] IPVS: ftp: loaded support on port[0] = 21 [ 41.163864] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.172601] team0: Port device team_slave_0 added [ 41.183670] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.195655] team0: Port device team_slave_1 added [ 41.209325] chnl_net:caif_netlink_parms(): no params data found [ 41.253169] IPVS: ftp: loaded support on port[0] = 21 [ 41.273627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.279884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.306219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.344212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.351002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.381505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.393793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 41.420077] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 41.450020] IPVS: ftp: loaded support on port[0] = 21 [ 41.489096] device hsr_slave_0 entered promiscuous mode [ 41.495323] device hsr_slave_1 entered promiscuous mode [ 41.559900] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 41.571521] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 41.685536] IPVS: ftp: loaded support on port[0] = 21 [ 41.688956] chnl_net:caif_netlink_parms(): no params data found [ 41.717381] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.724443] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.732343] device bridge_slave_0 entered promiscuous mode [ 41.753757] chnl_net:caif_netlink_parms(): no params data found [ 41.774542] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.782116] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.789100] device bridge_slave_1 entered promiscuous mode [ 41.862906] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 41.874556] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 41.931939] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 41.939396] team0: Port device team_slave_0 added [ 41.984235] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 41.992665] team0: Port device team_slave_1 added [ 42.038976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.046379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.072883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.087484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.094404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.120291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.139632] chnl_net:caif_netlink_parms(): no params data found [ 42.153768] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.161204] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.167550] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.175103] device bridge_slave_0 entered promiscuous mode [ 42.185154] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.191600] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.198697] device bridge_slave_1 entered promiscuous mode [ 42.208121] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.237030] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.244086] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.251696] device bridge_slave_0 entered promiscuous mode [ 42.305717] chnl_net:caif_netlink_parms(): no params data found [ 42.352862] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.359223] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.367991] device bridge_slave_1 entered promiscuous mode [ 42.394094] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.405159] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.415022] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 42.434013] device hsr_slave_0 entered promiscuous mode [ 42.440976] device hsr_slave_1 entered promiscuous mode [ 42.459412] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.473813] team0: Port device team_slave_0 added [ 42.481277] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 42.494954] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.502247] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.509746] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.518773] team0: Port device team_slave_1 added [ 42.532995] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 42.586759] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 42.595016] team0: Port device team_slave_0 added [ 42.601226] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 42.608689] team0: Port device team_slave_1 added [ 42.616819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.624038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.649324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.663787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.670093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.695425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.729289] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.735908] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.744081] device bridge_slave_0 entered promiscuous mode [ 42.751397] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.765371] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 42.778877] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.787398] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.794323] Bluetooth: hci0: command 0x0409 tx timeout [ 42.802096] device bridge_slave_1 entered promiscuous mode [ 42.808954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.816196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.842499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.868565] device hsr_slave_0 entered promiscuous mode [ 42.875053] device hsr_slave_1 entered promiscuous mode [ 42.882375] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 42.902508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.908752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.935606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.946994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 42.954108] Bluetooth: hci1: command 0x0409 tx timeout [ 42.954830] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 42.987618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.027096] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.036996] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.046570] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.054017] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.062245] device bridge_slave_0 entered promiscuous mode [ 43.071836] device hsr_slave_0 entered promiscuous mode [ 43.077475] device hsr_slave_1 entered promiscuous mode [ 43.088241] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.100283] Bluetooth: hci2: command 0x0409 tx timeout [ 43.113353] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.119766] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.127488] device bridge_slave_1 entered promiscuous mode [ 43.145133] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.178570] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.192638] team0: Port device team_slave_0 added [ 43.206251] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 43.214962] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.225625] team0: Port device team_slave_1 added [ 43.256365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.263567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.269950] Bluetooth: hci3: command 0x0409 tx timeout [ 43.289534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.306705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.313103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.338489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.350608] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 43.382096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.389380] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.396659] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.424808] Bluetooth: hci4: command 0x0409 tx timeout [ 43.432400] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 43.441594] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.472308] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 43.481462] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 43.488895] team0: Port device team_slave_0 added [ 43.499668] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 43.508516] team0: Port device team_slave_1 added [ 43.530463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.538426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.547902] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 43.554798] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.563474] device hsr_slave_0 entered promiscuous mode [ 43.569191] device hsr_slave_1 entered promiscuous mode [ 43.579913] Bluetooth: hci5: command 0x0409 tx timeout [ 43.601533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.607781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.634387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.649304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.656458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.685068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.696131] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.705834] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.726188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 43.734788] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 43.747045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.755636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.763877] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.770396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.778178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.789002] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 43.799170] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.811737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 43.834431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.842630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.851773] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.858123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.903885] device hsr_slave_0 entered promiscuous mode [ 43.910534] device hsr_slave_1 entered promiscuous mode [ 43.916948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 43.936379] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 43.943828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.954690] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 43.972540] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 43.988746] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.006309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.014945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.023272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.035326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.044014] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.081073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.095104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.103570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.128983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.154018] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.173042] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.185882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.195645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.208442] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.218230] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.245618] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.255700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.265183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.273436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.281736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.291039] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 44.297170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.317531] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.324931] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.341237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.352194] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.361497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.382990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.391003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.398599] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.405146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.413343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.422675] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.431966] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 44.441526] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.453538] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 44.460833] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 44.468364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.477186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.486013] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.492417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.499228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.506773] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.515258] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 44.523995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 44.539181] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.546628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.555715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.564071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.573613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.583801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 44.597387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 44.605667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.613749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.621733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.630070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.644675] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 44.652810] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 44.671362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.678340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.691119] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 44.699076] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.709481] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.716683] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 44.722951] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.738687] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 44.745918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.754787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.763616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.772154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.783214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 44.798318] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.808394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.817699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.825687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.833723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.842320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.850048] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.856369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.864151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.872061] Bluetooth: hci0: command 0x041b tx timeout [ 44.876126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 44.891303] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 44.904163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 44.911501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.919213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.928975] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.935406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.943498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.952274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.960447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.968174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.976412] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.982795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.990224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.001433] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.009215] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.016632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.024174] Bluetooth: hci1: command 0x041b tx timeout [ 45.033753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.043400] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.052488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.064717] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 45.072928] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 45.079915] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 45.086482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.095217] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.103554] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.109949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.117107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.127704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.138079] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 45.150887] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.160355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.168159] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 45.178945] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 45.185871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.189360] Bluetooth: hci2: command 0x041b tx timeout [ 45.194043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.205484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.212722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.220900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.228217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.236209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.243549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.254903] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.261919] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.271887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.280038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.290303] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 45.297518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.307203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.317859] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 45.327112] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 45.333648] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.342680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.351185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.358733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.368131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.375835] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.382243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.389156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.396050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.403164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.411258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.418857] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.425301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.432611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.440908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.447801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.454937] device veth0_vlan entered promiscuous mode [ 45.465701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.469698] Bluetooth: hci3: command 0x041b tx timeout [ 45.477326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.485103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.495538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.503143] Bluetooth: hci4: command 0x041b tx timeout [ 45.510198] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.520052] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 45.531700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 45.539345] device veth1_vlan entered promiscuous mode [ 45.545173] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 45.561581] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 45.569103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.577973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.586799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.595040] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.603069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.611043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.618573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.626531] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.634243] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.640646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.647416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.655361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.663293] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.669698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.676826] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.684244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.693944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.700735] Bluetooth: hci5: command 0x041b tx timeout [ 45.706431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.714446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.731162] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 45.739529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.753420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 45.762130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.772080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 45.793575] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 45.800944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.808853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.820082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.827745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.836242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.844179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.853957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 45.863069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 45.874118] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 45.883878] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.892261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.902097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.911684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.920794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.928652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.939609] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 45.947414] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 45.957871] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 45.965378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.975423] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 45.984666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.993478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.002073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.010574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.017982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.026285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.036877] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.048868] device veth0_macvtap entered promiscuous mode [ 46.055623] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 46.065784] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 46.075079] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.085960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.094564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.102724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.114738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.128117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.137060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.153896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 46.162069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.171243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.178607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.186867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.194840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.202841] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.211124] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.218934] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.225157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.240185] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 46.250771] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 46.257804] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 46.265235] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 46.280867] device veth1_macvtap entered promiscuous mode [ 46.293752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 46.302906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.312276] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.324115] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.335092] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 46.346164] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.355018] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.362921] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 46.371881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.383919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.391372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.398761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.409749] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 46.416726] device veth0_vlan entered promiscuous mode [ 46.425045] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.432637] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.441662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 46.451785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.458649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.466827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.474089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.481382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.488053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.495316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.503018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.511621] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.524955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.535101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.543762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.553237] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 46.561108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.570009] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 46.576064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.588460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.603921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.622014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.634313] device veth1_vlan entered promiscuous mode [ 46.641374] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 46.651247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.669895] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 46.678349] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 46.685540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.713400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.722174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.731686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.766651] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 46.774828] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 46.795698] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 46.809524] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 46.818489] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 46.828280] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 46.836965] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 46.846373] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 46.856029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.865578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.880941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.890518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.897228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.904899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.914011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.924780] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 46.939263] Bluetooth: hci0: command 0x040f tx timeout [ 46.946172] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 46.955418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.969908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.987250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.995698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.007504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.029964] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 47.038233] device veth0_macvtap entered promiscuous mode [ 47.045177] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 47.057515] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 47.076358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.084660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.098641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.114995] device veth1_macvtap entered promiscuous mode [ 47.121987] Bluetooth: hci1: command 0x040f tx timeout [ 47.123036] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 47.144140] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 47.152165] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 47.160029] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 47.166685] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.177846] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 47.187261] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 47.194987] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 47.205528] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 47.220795] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 47.232876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 47.246349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.255803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.267177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 47.278153] Bluetooth: hci2: command 0x040f tx timeout [ 47.278590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.294404] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 47.301461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.312014] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 47.321018] device veth0_vlan entered promiscuous mode [ 47.327742] device veth0_vlan entered promiscuous mode [ 47.337586] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 47.352717] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 47.360040] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 47.366224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.373524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.380780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.388464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.396845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.404533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.415508] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 47.423307] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 47.431222] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 47.452243] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 47.466764] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 47.474451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 47.485134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.495894] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 47.504197] Bluetooth: hci3: command 0x040f tx timeout [ 47.506058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.516440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.524000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.531554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.539030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.546458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.554422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.562242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.570218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.578057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.584703] Bluetooth: hci4: command 0x040f tx timeout [ 47.592574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.600020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.606859] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.616557] device veth1_vlan entered promiscuous mode [ 47.623082] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 47.633603] device veth0_vlan entered promiscuous mode [ 47.644520] device veth1_vlan entered promiscuous mode [ 47.655667] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 47.669977] device veth1_vlan entered promiscuous mode [ 47.675917] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 47.686861] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 47.700318] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 47.714065] device veth0_vlan entered promiscuous mode [ 47.730951] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 47.744321] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 47.752514] Bluetooth: hci5: command 0x040f tx timeout [ 47.791771] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 47.808242] device veth1_vlan entered promiscuous mode [ 47.815657] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 47.831036] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 47.843350] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 47.850312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.852451] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 47.857526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.870163] device veth0_macvtap entered promiscuous mode [ 47.878546] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 47.891524] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 47.903497] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.911855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.920942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.928260] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.936241] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.944162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.952496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.960637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.967756] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.975299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.983267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.999932] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 48.007147] device veth1_macvtap entered promiscuous mode [ 48.017964] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 48.030381] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 48.044176] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.051711] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.059767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.067381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.077939] device veth0_macvtap entered promiscuous mode [ 48.086230] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 48.094456] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 48.104652] device veth0_macvtap entered promiscuous mode [ 48.111308] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 48.121247] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 48.129244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 48.137958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.150693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.158388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.169594] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 48.176850] device veth1_macvtap entered promiscuous mode [ 48.178618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.184462] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 48.196294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.199634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 48.212913] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 48.222341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.231740] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.239791] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.246691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.254959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.264953] device veth0_macvtap entered promiscuous mode [ 48.272556] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 48.281610] device veth1_macvtap entered promiscuous mode [ 48.291910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 48.301819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 48.302003] BUG: sleeping function called from invalid context at net/mac80211/sta_info.c:1850 [ 48.313266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.329498] in_atomic(): 0, irqs_disabled(): 0, pid: 23, name: kworker/u4:1 [ 48.331754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 48.337549] 4 locks held by kworker/u4:1/23: [ 48.348247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.356007] #0: 00000000320f276e ((wq_completion)"%s"wiphy_name(local->hw.wiphy)){+.+.}, at: process_one_work+0x767/0x1570 [ 48.363529] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 48.377485] #1: 00000000b55dd252 ((work_completion)(&sdata->work)){+.+.}, at: process_one_work+0x79c/0x1570 [ 48.381730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.394879] #2: 00000000084bc800 (&wdev->mtx){+.+.}, at: ieee80211_ibss_work+0x85/0xe10 [ 48.410322] device veth1_macvtap entered promiscuous mode [ 48.413078] #3: 000000009728ed38 (rcu_read_lock){....}, at: sta_info_insert_rcu+0x48e/0x2310 [ 48.420583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 48.424790] Preemption disabled at: [ 48.424808] [] rcu_lockdep_current_cpu_online+0x32/0x1b0 [ 48.454281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 48.461139] CPU: 0 PID: 23 Comm: kworker/u4:1 Not tainted 4.19.159-syzkaller #0 [ 48.471624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.474976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.480981] Workqueue: phy3 ieee80211_iface_work [ 48.480989] Call Trace: [ 48.481005] dump_stack+0x1fc/0x2fe [ 48.481022] ? rcu_lockdep_current_cpu_online+0x32/0x1b0 [ 48.481034] ___might_sleep.cold+0x235/0x250 [ 48.481050] sta_info_move_state+0x32/0x900 [ 48.481066] sta_info_free+0x55/0x390 [ 48.481084] sta_info_insert_rcu+0x517/0x2310 [ 48.481100] ? __local_bh_enable_ip+0x159/0x270 [ 48.503721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 48.506537] ? check_preemption_disabled+0x41/0x280 [ 48.506555] ? minstrel_ht_rate_update+0x40/0x40 [ 48.517521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.519037] ? rate_control_rate_init+0x2fa/0x4f0 [ 48.519056] ieee80211_ibss_finish_sta+0x25b/0x360 [ 48.519071] ? ieee80211_sta_join_ibss+0xe50/0xe50 [ 48.519083] ? mark_held_locks+0xa6/0xf0 [ 48.519096] ? __local_bh_enable_ip+0x159/0x270 [ 48.519113] ieee80211_ibss_work+0x2b6/0xe10 [ 48.525971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 48.528264] ? ieee80211_ibss_rx_queued_mgmt+0x18b0/0x18b0 [ 48.528279] ? mark_held_locks+0xa6/0xf0 [ 48.547987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.556805] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 48.556820] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 48.556834] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 48.556853] ieee80211_iface_work+0x7ba/0x8a0 [ 48.556873] process_one_work+0x864/0x1570 [ 48.556890] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 48.556914] worker_thread+0x64c/0x1130 [ 48.579009] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 48.580284] ? process_one_work+0x1570/0x1570 [ 48.580299] kthread+0x33f/0x460 [ 48.584866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.594401] ? kthread_park+0x180/0x180 [ 48.594415] ret_from_fork+0x24/0x30 [ 48.675375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.683421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.691623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.700365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.708046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.720661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 48.731442] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.740997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 48.751721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.762780] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 48.770606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.779227] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 48.789786] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 48.798315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.808308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.825881] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 48.834547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 48.851614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.861796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 48.871676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.880976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 48.890845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.901444] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 48.908721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.917535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 48.929402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.939314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 48.949082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.958183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 48.967942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.977111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 48.986952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.997444] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 49.005035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.015935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 49.025893] Bluetooth: hci0: command 0x0419 tx timeout [ 49.040469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.050329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 49.060571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.070149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 49.080963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.090707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 49.102016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.111597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 49.121846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.132906] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 49.140611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.147550] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.160266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.168292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.177332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.179260] Bluetooth: hci1: command 0x0419 tx timeout [ 49.186286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.198311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.215505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.226253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.236475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.247548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.257058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.267456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.277010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.287129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.297761] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 49.305295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.323302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.339431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.347931] Bluetooth: hci2: command 0x0419 tx timeout [ 49.358986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.381491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.391839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.402894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.412522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.423230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.432729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.442902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.452730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 49.462867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.473654] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready 11:31:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x8, 0x101, 0x6, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8007, 0x80, 0x0, 0x9}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair(0x4, 0xa, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', r1, 0x29, 0x4, 0xc7, 0x0, 0x6a, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x8080, 0x400}}) r4 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000003c0)={0x0, 0x3e6, 0x61, [], &(0x7f0000000380)=0x3}) clock_gettime(0x2, &(0x7f0000000400)) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000440)) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000580)=0x5) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000005c0)) getpid() sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20011) [ 49.480977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.535327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.544811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.578981] Bluetooth: hci3: command 0x0419 tx timeout [ 49.603387] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 49.622805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.630983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.659187] Bluetooth: hci4: command 0x0419 tx timeout [ 49.675773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 11:31:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x8, 0x101, 0x6, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8007, 0x80, 0x0, 0x9}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair(0x4, 0xa, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', r1, 0x29, 0x4, 0xc7, 0x0, 0x6a, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x8080, 0x400}}) r4 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000003c0)={0x0, 0x3e6, 0x61, [], &(0x7f0000000380)=0x3}) clock_gettime(0x2, &(0x7f0000000400)) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000440)) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000580)=0x5) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000005c0)) getpid() sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20011) [ 49.702496] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 49.731508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.740445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.776549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.819144] Bluetooth: hci5: command 0x0419 tx timeout 11:31:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x8, 0x101, 0x6, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8007, 0x80, 0x0, 0x9}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair(0x4, 0xa, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', r1, 0x29, 0x4, 0xc7, 0x0, 0x6a, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x8080, 0x400}}) r4 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000003c0)={0x0, 0x3e6, 0x61, [], &(0x7f0000000380)=0x3}) clock_gettime(0x2, &(0x7f0000000400)) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000440)) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000580)=0x5) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000005c0)) getpid() sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20011) 11:31:18 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x4000, 0x3, {r0, r1/1000+10000}, {0x2, 0x2, 0x9f, 0x9, 0x3, 0x6, "079f3dbe"}, 0x7, 0x2, @offset=0xc42, 0x7, 0x0, 0xffffffffffffffff}) r3 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000080) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, {0xd6, 0x0, 0x41, 0x26}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000540)={0x8, 0xa, &(0x7f0000000480)="47811b8504214adc0d95e80a8469a4b58a1835090f9e54b9380dde63e7cc5d55543464ebea88d2c6f72a621319439eca3d13d0d4336fea65f0880f603971e51ffc231c44098e04d989c7ea33030bffcd4aae11bb8800fec1bfe8d8edbd080e8eec5e728692a14a04201eddd483628a3ac592d7bed731544d3c52f63ad1897440802501bf8bd6f39580d6f0df4cd07938e24bcd5f3f08eb09eca00d553c751f3f08ba315877fd208b464fbfb9ce41e02f0902b5d3cf40ac034c3148", {0x6, 0x5, 0x30314752, 0x3, 0x8, 0x5568, 0x5, 0xfffffffe}}) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000580)) accept4$phonet_pipe(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80000) connect$phonet_pipe(r3, &(0x7f0000000640)={0x23, 0x1, 0x0, 0x80}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f00000006c0)) pselect6(0x40, &(0x7f0000000700)={0x1dd, 0x7, 0x3f, 0x3, 0x4, 0x401, 0x200800000000000, 0x5}, &(0x7f0000000740)={0x9, 0x5, 0xfff, 0x3, 0x7, 0x4, 0x200, 0xffffffff00000000}, &(0x7f0000000780)={0x9, 0x5, 0x5, 0xd0, 0x3d9, 0x101, 0x1f, 0x5}, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800)={[0x3]}, 0x8}) r6 = syz_open_dev$radio(&(0x7f0000000880)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000008c0)=0x7) r7 = syz_open_dev$radio(&(0x7f0000000900)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r7, 0x80085617, &(0x7f0000000940)) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000980)={0x7, 0x34343452, 0x2, @discrete={0x6, 0x8}}) [ 49.931649] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 49.950134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.957352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.018050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.031862] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready 11:31:19 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x4000, 0x3, {r0, r1/1000+10000}, {0x2, 0x2, 0x9f, 0x9, 0x3, 0x6, "079f3dbe"}, 0x7, 0x2, @offset=0xc42, 0x7, 0x0, 0xffffffffffffffff}) r3 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000080) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, {0xd6, 0x0, 0x41, 0x26}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000540)={0x8, 0xa, &(0x7f0000000480)="47811b8504214adc0d95e80a8469a4b58a1835090f9e54b9380dde63e7cc5d55543464ebea88d2c6f72a621319439eca3d13d0d4336fea65f0880f603971e51ffc231c44098e04d989c7ea33030bffcd4aae11bb8800fec1bfe8d8edbd080e8eec5e728692a14a04201eddd483628a3ac592d7bed731544d3c52f63ad1897440802501bf8bd6f39580d6f0df4cd07938e24bcd5f3f08eb09eca00d553c751f3f08ba315877fd208b464fbfb9ce41e02f0902b5d3cf40ac034c3148", {0x6, 0x5, 0x30314752, 0x3, 0x8, 0x5568, 0x5, 0xfffffffe}}) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000580)) accept4$phonet_pipe(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80000) connect$phonet_pipe(r3, &(0x7f0000000640)={0x23, 0x1, 0x0, 0x80}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f00000006c0)) pselect6(0x40, &(0x7f0000000700)={0x1dd, 0x7, 0x3f, 0x3, 0x4, 0x401, 0x200800000000000, 0x5}, &(0x7f0000000740)={0x9, 0x5, 0xfff, 0x3, 0x7, 0x4, 0x200, 0xffffffff00000000}, &(0x7f0000000780)={0x9, 0x5, 0x5, 0xd0, 0x3d9, 0x101, 0x1f, 0x5}, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800)={[0x3]}, 0x8}) r6 = syz_open_dev$radio(&(0x7f0000000880)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000008c0)=0x7) r7 = syz_open_dev$radio(&(0x7f0000000900)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r7, 0x80085617, &(0x7f0000000940)) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000980)={0x7, 0x34343452, 0x2, @discrete={0x6, 0x8}}) 11:31:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x8, 0x101, 0x6, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8007, 0x80, 0x0, 0x9}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair(0x4, 0xa, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', r1, 0x29, 0x4, 0xc7, 0x0, 0x6a, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x8080, 0x400}}) r4 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000003c0)={0x0, 0x3e6, 0x61, [], &(0x7f0000000380)=0x3}) clock_gettime(0x2, &(0x7f0000000400)) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000440)) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000580)=0x5) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000005c0)) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20011) [ 50.071963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.100895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.146443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:31:19 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x4000, 0x3, {r0, r1/1000+10000}, {0x2, 0x2, 0x9f, 0x9, 0x3, 0x6, "079f3dbe"}, 0x7, 0x2, @offset=0xc42, 0x7, 0x0, 0xffffffffffffffff}) r3 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000080) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, {0xd6, 0x0, 0x41, 0x26}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000540)={0x8, 0xa, &(0x7f0000000480)="47811b8504214adc0d95e80a8469a4b58a1835090f9e54b9380dde63e7cc5d55543464ebea88d2c6f72a621319439eca3d13d0d4336fea65f0880f603971e51ffc231c44098e04d989c7ea33030bffcd4aae11bb8800fec1bfe8d8edbd080e8eec5e728692a14a04201eddd483628a3ac592d7bed731544d3c52f63ad1897440802501bf8bd6f39580d6f0df4cd07938e24bcd5f3f08eb09eca00d553c751f3f08ba315877fd208b464fbfb9ce41e02f0902b5d3cf40ac034c3148", {0x6, 0x5, 0x30314752, 0x3, 0x8, 0x5568, 0x5, 0xfffffffe}}) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000580)) accept4$phonet_pipe(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80000) connect$phonet_pipe(r3, &(0x7f0000000640)={0x23, 0x1, 0x0, 0x80}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f00000006c0)) pselect6(0x40, &(0x7f0000000700)={0x1dd, 0x7, 0x3f, 0x3, 0x4, 0x401, 0x200800000000000, 0x5}, &(0x7f0000000740)={0x9, 0x5, 0xfff, 0x3, 0x7, 0x4, 0x200, 0xffffffff00000000}, &(0x7f0000000780)={0x9, 0x5, 0x5, 0xd0, 0x3d9, 0x101, 0x1f, 0x5}, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800)={[0x3]}, 0x8}) r6 = syz_open_dev$radio(&(0x7f0000000880)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000008c0)=0x7) r7 = syz_open_dev$radio(&(0x7f0000000900)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r7, 0x80085617, &(0x7f0000000940)) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000980)={0x7, 0x34343452, 0x2, @discrete={0x6, 0x8}}) 11:31:19 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x4000, 0x3, {r0, r1/1000+10000}, {0x2, 0x2, 0x9f, 0x9, 0x3, 0x6, "079f3dbe"}, 0x7, 0x2, @offset=0xc42, 0x7, 0x0, 0xffffffffffffffff}) r3 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000080) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, {0xd6, 0x0, 0x41, 0x26}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000540)={0x8, 0xa, &(0x7f0000000480)="47811b8504214adc0d95e80a8469a4b58a1835090f9e54b9380dde63e7cc5d55543464ebea88d2c6f72a621319439eca3d13d0d4336fea65f0880f603971e51ffc231c44098e04d989c7ea33030bffcd4aae11bb8800fec1bfe8d8edbd080e8eec5e728692a14a04201eddd483628a3ac592d7bed731544d3c52f63ad1897440802501bf8bd6f39580d6f0df4cd07938e24bcd5f3f08eb09eca00d553c751f3f08ba315877fd208b464fbfb9ce41e02f0902b5d3cf40ac034c3148", {0x6, 0x5, 0x30314752, 0x3, 0x8, 0x5568, 0x5, 0xfffffffe}}) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000580)) accept4$phonet_pipe(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80000) connect$phonet_pipe(r3, &(0x7f0000000640)={0x23, 0x1, 0x0, 0x80}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f00000006c0)) pselect6(0x40, &(0x7f0000000700)={0x1dd, 0x7, 0x3f, 0x3, 0x4, 0x401, 0x200800000000000, 0x5}, &(0x7f0000000740)={0x9, 0x5, 0xfff, 0x3, 0x7, 0x4, 0x200, 0xffffffff00000000}, &(0x7f0000000780)={0x9, 0x5, 0x5, 0xd0, 0x3d9, 0x101, 0x1f, 0x5}, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800)={[0x3]}, 0x8}) r6 = syz_open_dev$radio(&(0x7f0000000880)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000008c0)=0x7) r7 = syz_open_dev$radio(&(0x7f0000000900)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r7, 0x80085617, &(0x7f0000000940)) socket$inet6_dccp(0xa, 0x6, 0x0) [ 50.263914] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 50.294001] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 50.338607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.368704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.375737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.393629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.417522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.428057] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 50.439917] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 50.452189] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 50.471518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.482128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.496752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.520729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.527998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.533064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.536894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.559827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.570540] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 50.577029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.584399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.597398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.597501] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.620254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:31:19 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = eventfd2(0x80, 0x800) write$eventfd(r0, &(0x7f0000000040)=0x8af, 0x8) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)=""/234, &(0x7f0000000180)=0xea) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x4e, 0x800, 0x2, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = accept(r1, 0x0, &(0x7f0000000680)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2f}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x261}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x38}}, 0x44040054) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000800)={0x1f, "b56b8f63a5e9885f56f46b40d3adfc24de80153f67be0ac7796ec3e470795d0a", 0x1}) write$eventfd(r0, &(0x7f0000000840)=0x1, 0x8) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000880)={0x7, 0x3, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x2, 0x1, 0x3f, 0x7f, 0x0, 0x50, "e3fa50b8"}, 0x8000, 0x3, @userptr=0x3, 0x8000}) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000900)) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000c40)={&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/246, 0xf6}, {&(0x7f0000000ac0)=""/73, 0x49}, {&(0x7f0000000b40)=""/61, 0x3d}, {&(0x7f0000000b80)=""/114, 0x72}], 0x4}, 0x142) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000c80)={0x1, 0x0, {0x7, 0x9, 0xe04, 0xfffffbff}}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000cc0)='net_prio.ifpriomap\x00', 0x2, 0x0) socketpair(0x2b, 0x80000, 0x2, &(0x7f0000000d00)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf8, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0x200c8481) 11:31:19 executing program 3: socketpair(0x29, 0xab4e7e39796e6e6, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x404809d) recvmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1, &(0x7f00000002c0)=""/32, 0x20}, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000540)={0xa2e5, 0x2, 0x4, 0x70000, 0x0, {0x0, 0x2710}, {0x2, 0x0, 0xe5, 0x1, 0x0, 0x2, "11422f95"}, 0x200, 0x3, @planes=&(0x7f0000000500)={0x4, 0x5, @mem_offset=0x1e, 0x101}, 0x3c9f}) socketpair(0xf, 0x0, 0x1000, &(0x7f0000001a00)={0xffffffffffffffff}) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000001a40)=0x1, 0x4) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0xb526835ac826e3fe) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl0\x00', r3, 0x2f, 0x0, 0x1, 0x8, 0x78, @empty, @empty, 0x700, 0x700, 0x1ff, 0x7}}) r8 = syz_open_dev$radio(&(0x7f0000001b40)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FBUF(r8, 0x8030560a, &(0x7f0000001c80)={0x20, 0x0, &(0x7f0000001b80)="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", {0x84, 0x6, 0x20385655, 0x8, 0x100, 0x2, 0x6, 0x2}}) ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f0000001cc0)={0x4, {0x0, 0x5, 0x9, 0x2}, {0x2d, 0x7, 0x175}, {0x4, 0x2}}) socket$inet_sctp(0x2, 0x1, 0x84) read$eventfd(r6, &(0x7f0000001d00), 0x8) getpeername(r2, &(0x7f0000001d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000001dc0)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001e80)={'syztnl0\x00', &(0x7f0000001e00)={'syztnl1\x00', r7, 0x4, 0x6, 0x4, 0x4, 0x4, @dev={0xfe, 0x80, [], 0x1d}, @mcast1, 0x80, 0x10, 0xfa41, 0x8}}) 11:31:19 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x4000, 0x3, {r0, r1/1000+10000}, {0x2, 0x2, 0x9f, 0x9, 0x3, 0x6, "079f3dbe"}, 0x7, 0x2, @offset=0xc42, 0x7, 0x0, 0xffffffffffffffff}) r3 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000080) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, {0xd6, 0x0, 0x41, 0x26}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000540)={0x8, 0xa, &(0x7f0000000480)="47811b8504214adc0d95e80a8469a4b58a1835090f9e54b9380dde63e7cc5d55543464ebea88d2c6f72a621319439eca3d13d0d4336fea65f0880f603971e51ffc231c44098e04d989c7ea33030bffcd4aae11bb8800fec1bfe8d8edbd080e8eec5e728692a14a04201eddd483628a3ac592d7bed731544d3c52f63ad1897440802501bf8bd6f39580d6f0df4cd07938e24bcd5f3f08eb09eca00d553c751f3f08ba315877fd208b464fbfb9ce41e02f0902b5d3cf40ac034c3148", {0x6, 0x5, 0x30314752, 0x3, 0x8, 0x5568, 0x5, 0xfffffffe}}) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000580)) accept4$phonet_pipe(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80000) connect$phonet_pipe(r3, &(0x7f0000000640)={0x23, 0x1, 0x0, 0x80}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f00000006c0)) pselect6(0x40, &(0x7f0000000700)={0x1dd, 0x7, 0x3f, 0x3, 0x4, 0x401, 0x200800000000000, 0x5}, &(0x7f0000000740)={0x9, 0x5, 0xfff, 0x3, 0x7, 0x4, 0x200, 0xffffffff00000000}, &(0x7f0000000780)={0x9, 0x5, 0x5, 0xd0, 0x3d9, 0x101, 0x1f, 0x5}, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800)={[0x3]}, 0x8}) r6 = syz_open_dev$radio(&(0x7f0000000880)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000008c0)=0x7) syz_open_dev$radio(&(0x7f0000000900)='/dev/radio#\x00', 0x1, 0x2) socket$inet6_dccp(0xa, 0x6, 0x0) 11:31:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x8, 0x101, 0x6, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8007, 0x80, 0x0, 0x9}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair(0x4, 0xa, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', r1, 0x29, 0x4, 0xc7, 0x0, 0x6a, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x8080, 0x400}}) r4 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000003c0)={0x0, 0x3e6, 0x61, [], &(0x7f0000000380)=0x3}) clock_gettime(0x2, &(0x7f0000000400)) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000440)) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000580)=0x5) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20011) 11:31:19 executing program 5: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x7fffffff, 0x8, 0x4, 0x4000, 0x1, {0x77359400}, {0x1, 0x2, 0x80, 0xff, 0x0, 0x1, "9a62b002"}, 0x4, 0x1, @userptr=0x6, 0x2}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0xc, @win={{0x5, 0x4, 0x9, 0x8}, 0x3, 0x2d, &(0x7f0000000340)={{0x0, 0x8, 0x1, 0x100}, &(0x7f0000000300)={{0xf2cf, 0x1092, 0x0, 0x7fff}, &(0x7f00000002c0)={{0x8, 0x1ff, 0x7f}}}}, 0x9, &(0x7f0000000380)="1329b539cf52ee8720306b5c5fe3e0536fdfb5c1b56c2052f9606b86e4083ac7eabbd4c582be425ce0203bababf7848fdffa24003f7cb1f557f485047cf81d3837cfd8e20b90ba64480bec99ef8955b2f06c8218556197da288bf26769ef86cd674747de3dbed3c62c78fa9bcf64ed264702fda91257aadc9022775c3c2edc2600a08cfdfb24848151269d6eed262d4adbc82f5cf7c41ccfd5a5eb96eb60752558c72d9e292bed845a2ba8e0fb5bb8dcfb45ed7dc589216bb8861018", 0x20}}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x184, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0xab, 0x5b, "123f9a74c27c27b1a76d355e824bbab5aa626b49adbd283e342c916b62871eb4737229ca3a581eb5c983cdbc269f3296511226fdc2cd475e9c418540eb8e0dcd7e5fa2977a5a574d7e1f208c22f481e0fa0b7dee1bd4cc6c17f9d73566c9b56a72ead5d5d3a98809f98e38e0089b96ddfb29142ca3c58a72fc02cdf6064d037cfbe8bef8a9658482e5f4cbeed044cd6a599d2be9bafedf53a809300e36fe278d75412931ddeb06"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffc1}, @NL80211_ATTR_FRAME_MATCH={0x9d, 0x5b, "cdee3ae02ef3aebceb719259eb66c29d13d2b46d8c5aa0da15be29f51b5bef6a136d80af547b7c011f7ff0d1bb7b6a474723bb4a7bef0b1cfe9c31ec4b91eb05de9f2b0a8938ffa39bff3451d86e4241a79289a4f3b5ce0bf8b55c662f0c1db7f16bfed097fef81e5ad6d5f9007281804ffa94c23b1424a88083f2e481db1cd9b3c4f910ac466f484bb1dabfd67ee07014d511d82e73ae3d38"}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000841) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x0) r3 = accept4$phonet_pipe(r2, &(0x7f00000009c0), &(0x7f0000000a00)=0x10, 0x80800) accept4$phonet_pipe(r3, &(0x7f0000000a40), &(0x7f0000000a80)=0x10, 0x80800) openat$userio(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/userio\x00', 0x8000, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000b00)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000b40)={0x4, 0x2, 0x3, {0x0, @pix_mp={0x8000, 0x0, 0x31364d4e, 0x3, 0x3, [{0x80, 0x8001}, {0x8001, 0x43c}, {0x4, 0x6}, {0x1, 0x1f}, {0x9}, {0x7, 0x40}, {0x1, 0x419f}, {0x8001, 0xfffffff7}], 0x7f, 0x81, 0x0, 0x0, 0x4}}, 0x4}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd92, 0x2}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = syz_open_dev$radio(&(0x7f0000000d80)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000dc0)={0xf4, 0x5, 0xfff, 0x0, 0x8, 0x20, 0x10001}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20040011) socket$pppoe(0x18, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x55}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x40040) 11:31:19 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x18ce97bd1ff148fc) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pptp, &(0x7f0000000200)=0x80) r2 = accept$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000002c0)={0x8, 0x10001, @value=0xfe6}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000300)={0x3, {0x7f, 0x6, 0x1, 0x3}}) r3 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f00000003c0)={0x0, 0x200, 0x200, [], &(0x7f0000000380)=0x80}) r4 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, {0x6, 0x3, 0x80000000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r5, 0x29, 0x0, 0x8, 0x1, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x40, 0x89cb, 0x4}}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10000}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048010) getpeername(r2, &(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000c40)=0x80) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xac, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xac}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000e00)={0x0, @bt={0x4, 0xcf, 0x1, 0x1, 0x10000, 0x5, 0x6, 0x0, 0x1f, 0xffff, 0x759, 0x692d, 0x9, 0xff, 0x18, 0x5, {0x8257, 0x7fff}, 0xa4, 0x3f}}) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getpeername(r8, &(0x7f0000000ec0)=@generic, &(0x7f0000000f40)=0x80) 11:31:19 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x4000, 0x3, {r0, r1/1000+10000}, {0x2, 0x2, 0x9f, 0x9, 0x3, 0x6, "079f3dbe"}, 0x7, 0x2, @offset=0xc42, 0x7, 0x0, 0xffffffffffffffff}) r3 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000080) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, {0xd6, 0x0, 0x41, 0x26}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000540)={0x8, 0xa, &(0x7f0000000480)="47811b8504214adc0d95e80a8469a4b58a1835090f9e54b9380dde63e7cc5d55543464ebea88d2c6f72a621319439eca3d13d0d4336fea65f0880f603971e51ffc231c44098e04d989c7ea33030bffcd4aae11bb8800fec1bfe8d8edbd080e8eec5e728692a14a04201eddd483628a3ac592d7bed731544d3c52f63ad1897440802501bf8bd6f39580d6f0df4cd07938e24bcd5f3f08eb09eca00d553c751f3f08ba315877fd208b464fbfb9ce41e02f0902b5d3cf40ac034c3148", {0x6, 0x5, 0x30314752, 0x3, 0x8, 0x5568, 0x5, 0xfffffffe}}) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000580)) accept4$phonet_pipe(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80000) connect$phonet_pipe(r3, &(0x7f0000000640)={0x23, 0x1, 0x0, 0x80}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f00000006c0)) pselect6(0x40, &(0x7f0000000700)={0x1dd, 0x7, 0x3f, 0x3, 0x4, 0x401, 0x200800000000000, 0x5}, &(0x7f0000000740)={0x9, 0x5, 0xfff, 0x3, 0x7, 0x4, 0x200, 0xffffffff00000000}, &(0x7f0000000780)={0x9, 0x5, 0x5, 0xd0, 0x3d9, 0x101, 0x1f, 0x5}, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800)={[0x3]}, 0x8}) r6 = syz_open_dev$radio(&(0x7f0000000880)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_STREAMOFF(r6, 0x40045613, &(0x7f00000008c0)=0x7) socket$inet6_dccp(0xa, 0x6, 0x0) 11:31:19 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = eventfd2(0x80, 0x800) write$eventfd(r0, &(0x7f0000000040)=0x8af, 0x8) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)=""/234, &(0x7f0000000180)=0xea) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x4e, 0x800, 0x2, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = accept(r1, 0x0, &(0x7f0000000680)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2f}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x261}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x38}}, 0x44040054) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000800)={0x1f, "b56b8f63a5e9885f56f46b40d3adfc24de80153f67be0ac7796ec3e470795d0a", 0x1}) write$eventfd(r0, &(0x7f0000000840)=0x1, 0x8) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000880)={0x7, 0x3, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x2, 0x1, 0x3f, 0x7f, 0x0, 0x50, "e3fa50b8"}, 0x8000, 0x3, @userptr=0x3, 0x8000}) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000900)) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000c40)={&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/246, 0xf6}, {&(0x7f0000000ac0)=""/73, 0x49}, {&(0x7f0000000b40)=""/61, 0x3d}, {&(0x7f0000000b80)=""/114, 0x72}], 0x4}, 0x142) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000c80)={0x1, 0x0, {0x7, 0x9, 0xe04, 0xfffffbff}}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000cc0)='net_prio.ifpriomap\x00', 0x2, 0x0) socketpair(0x2b, 0x80000, 0x2, &(0x7f0000000d00)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf8, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0x200c8481) 11:31:19 executing program 3: socketpair(0x29, 0xab4e7e39796e6e6, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x404809d) recvmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1, &(0x7f00000002c0)=""/32, 0x20}, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000540)={0xa2e5, 0x2, 0x4, 0x70000, 0x0, {0x0, 0x2710}, {0x2, 0x0, 0xe5, 0x1, 0x0, 0x2, "11422f95"}, 0x200, 0x3, @planes=&(0x7f0000000500)={0x4, 0x5, @mem_offset=0x1e, 0x101}, 0x3c9f}) socketpair(0xf, 0x0, 0x1000, &(0x7f0000001a00)={0xffffffffffffffff}) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000001a40)=0x1, 0x4) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0xb526835ac826e3fe) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl0\x00', r3, 0x2f, 0x0, 0x1, 0x8, 0x78, @empty, @empty, 0x700, 0x700, 0x1ff, 0x7}}) r8 = syz_open_dev$radio(&(0x7f0000001b40)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FBUF(r8, 0x8030560a, &(0x7f0000001c80)={0x20, 0x0, &(0x7f0000001b80)="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", {0x84, 0x6, 0x20385655, 0x8, 0x100, 0x2, 0x6, 0x2}}) ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f0000001cc0)={0x4, {0x0, 0x5, 0x9, 0x2}, {0x2d, 0x7, 0x175}, {0x4, 0x2}}) socket$inet_sctp(0x2, 0x1, 0x84) read$eventfd(r6, &(0x7f0000001d00), 0x8) getpeername(r2, &(0x7f0000001d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000001dc0)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001e80)={'syztnl0\x00', &(0x7f0000001e00)={'syztnl1\x00', r7, 0x4, 0x6, 0x4, 0x4, 0x4, @dev={0xfe, 0x80, [], 0x1d}, @mcast1, 0x80, 0x10, 0xfa41, 0x8}}) 11:31:19 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x18ce97bd1ff148fc) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pptp, &(0x7f0000000200)=0x80) r2 = accept$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000002c0)={0x8, 0x10001, @value=0xfe6}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000300)={0x3, {0x7f, 0x6, 0x1, 0x3}}) r3 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f00000003c0)={0x0, 0x200, 0x200, [], &(0x7f0000000380)=0x80}) r4 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, {0x6, 0x3, 0x80000000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r5, 0x29, 0x0, 0x8, 0x1, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x40, 0x89cb, 0x4}}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10000}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048010) getpeername(r2, &(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000c40)=0x80) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xac, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xac}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000e00)={0x0, @bt={0x4, 0xcf, 0x1, 0x1, 0x10000, 0x5, 0x6, 0x0, 0x1f, 0xffff, 0x759, 0x692d, 0x9, 0xff, 0x18, 0x5, {0x8257, 0x7fff}, 0xa4, 0x3f}}) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getpeername(r8, &(0x7f0000000ec0)=@generic, &(0x7f0000000f40)=0x80) 11:31:19 executing program 5: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x7fffffff, 0x8, 0x4, 0x4000, 0x1, {0x77359400}, {0x1, 0x2, 0x80, 0xff, 0x0, 0x1, "9a62b002"}, 0x4, 0x1, @userptr=0x6, 0x2}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0xc, @win={{0x5, 0x4, 0x9, 0x8}, 0x3, 0x2d, &(0x7f0000000340)={{0x0, 0x8, 0x1, 0x100}, &(0x7f0000000300)={{0xf2cf, 0x1092, 0x0, 0x7fff}, &(0x7f00000002c0)={{0x8, 0x1ff, 0x7f}}}}, 0x9, &(0x7f0000000380)="1329b539cf52ee8720306b5c5fe3e0536fdfb5c1b56c2052f9606b86e4083ac7eabbd4c582be425ce0203bababf7848fdffa24003f7cb1f557f485047cf81d3837cfd8e20b90ba64480bec99ef8955b2f06c8218556197da288bf26769ef86cd674747de3dbed3c62c78fa9bcf64ed264702fda91257aadc9022775c3c2edc2600a08cfdfb24848151269d6eed262d4adbc82f5cf7c41ccfd5a5eb96eb60752558c72d9e292bed845a2ba8e0fb5bb8dcfb45ed7dc589216bb8861018", 0x20}}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x184, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0xab, 0x5b, "123f9a74c27c27b1a76d355e824bbab5aa626b49adbd283e342c916b62871eb4737229ca3a581eb5c983cdbc269f3296511226fdc2cd475e9c418540eb8e0dcd7e5fa2977a5a574d7e1f208c22f481e0fa0b7dee1bd4cc6c17f9d73566c9b56a72ead5d5d3a98809f98e38e0089b96ddfb29142ca3c58a72fc02cdf6064d037cfbe8bef8a9658482e5f4cbeed044cd6a599d2be9bafedf53a809300e36fe278d75412931ddeb06"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffc1}, @NL80211_ATTR_FRAME_MATCH={0x9d, 0x5b, "cdee3ae02ef3aebceb719259eb66c29d13d2b46d8c5aa0da15be29f51b5bef6a136d80af547b7c011f7ff0d1bb7b6a474723bb4a7bef0b1cfe9c31ec4b91eb05de9f2b0a8938ffa39bff3451d86e4241a79289a4f3b5ce0bf8b55c662f0c1db7f16bfed097fef81e5ad6d5f9007281804ffa94c23b1424a88083f2e481db1cd9b3c4f910ac466f484bb1dabfd67ee07014d511d82e73ae3d38"}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000841) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x0) r3 = accept4$phonet_pipe(r2, &(0x7f00000009c0), &(0x7f0000000a00)=0x10, 0x80800) accept4$phonet_pipe(r3, &(0x7f0000000a40), &(0x7f0000000a80)=0x10, 0x80800) openat$userio(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/userio\x00', 0x8000, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000b00)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000b40)={0x4, 0x2, 0x3, {0x0, @pix_mp={0x8000, 0x0, 0x31364d4e, 0x3, 0x3, [{0x80, 0x8001}, {0x8001, 0x43c}, {0x4, 0x6}, {0x1, 0x1f}, {0x9}, {0x7, 0x40}, {0x1, 0x419f}, {0x8001, 0xfffffff7}], 0x7f, 0x81, 0x0, 0x0, 0x4}}, 0x4}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd92, 0x2}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = syz_open_dev$radio(&(0x7f0000000d80)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000dc0)={0xf4, 0x5, 0xfff, 0x0, 0x8, 0x20, 0x10001}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20040011) socket$pppoe(0x18, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x55}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x40040) 11:31:19 executing program 5: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x7fffffff, 0x8, 0x4, 0x4000, 0x1, {0x77359400}, {0x1, 0x2, 0x80, 0xff, 0x0, 0x1, "9a62b002"}, 0x4, 0x1, @userptr=0x6, 0x2}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0xc, @win={{0x5, 0x4, 0x9, 0x8}, 0x3, 0x2d, &(0x7f0000000340)={{0x0, 0x8, 0x1, 0x100}, &(0x7f0000000300)={{0xf2cf, 0x1092, 0x0, 0x7fff}, &(0x7f00000002c0)={{0x8, 0x1ff, 0x7f}}}}, 0x9, &(0x7f0000000380)="1329b539cf52ee8720306b5c5fe3e0536fdfb5c1b56c2052f9606b86e4083ac7eabbd4c582be425ce0203bababf7848fdffa24003f7cb1f557f485047cf81d3837cfd8e20b90ba64480bec99ef8955b2f06c8218556197da288bf26769ef86cd674747de3dbed3c62c78fa9bcf64ed264702fda91257aadc9022775c3c2edc2600a08cfdfb24848151269d6eed262d4adbc82f5cf7c41ccfd5a5eb96eb60752558c72d9e292bed845a2ba8e0fb5bb8dcfb45ed7dc589216bb8861018", 0x20}}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x184, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0xab, 0x5b, "123f9a74c27c27b1a76d355e824bbab5aa626b49adbd283e342c916b62871eb4737229ca3a581eb5c983cdbc269f3296511226fdc2cd475e9c418540eb8e0dcd7e5fa2977a5a574d7e1f208c22f481e0fa0b7dee1bd4cc6c17f9d73566c9b56a72ead5d5d3a98809f98e38e0089b96ddfb29142ca3c58a72fc02cdf6064d037cfbe8bef8a9658482e5f4cbeed044cd6a599d2be9bafedf53a809300e36fe278d75412931ddeb06"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffc1}, @NL80211_ATTR_FRAME_MATCH={0x9d, 0x5b, "cdee3ae02ef3aebceb719259eb66c29d13d2b46d8c5aa0da15be29f51b5bef6a136d80af547b7c011f7ff0d1bb7b6a474723bb4a7bef0b1cfe9c31ec4b91eb05de9f2b0a8938ffa39bff3451d86e4241a79289a4f3b5ce0bf8b55c662f0c1db7f16bfed097fef81e5ad6d5f9007281804ffa94c23b1424a88083f2e481db1cd9b3c4f910ac466f484bb1dabfd67ee07014d511d82e73ae3d38"}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000841) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x0) r3 = accept4$phonet_pipe(r2, &(0x7f00000009c0), &(0x7f0000000a00)=0x10, 0x80800) accept4$phonet_pipe(r3, &(0x7f0000000a40), &(0x7f0000000a80)=0x10, 0x80800) openat$userio(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/userio\x00', 0x8000, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000b00)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000b40)={0x4, 0x2, 0x3, {0x0, @pix_mp={0x8000, 0x0, 0x31364d4e, 0x3, 0x3, [{0x80, 0x8001}, {0x8001, 0x43c}, {0x4, 0x6}, {0x1, 0x1f}, {0x9}, {0x7, 0x40}, {0x1, 0x419f}, {0x8001, 0xfffffff7}], 0x7f, 0x81, 0x0, 0x0, 0x4}}, 0x4}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd92, 0x2}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = syz_open_dev$radio(&(0x7f0000000d80)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000dc0)={0xf4, 0x5, 0xfff, 0x0, 0x8, 0x20, 0x10001}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20040011) socket$pppoe(0x18, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x58, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x55}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x40040) 11:31:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x8, 0x101, 0x6, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8007, 0x80, 0x0, 0x9}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair(0x4, 0xa, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', r1, 0x29, 0x4, 0xc7, 0x0, 0x6a, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x8080, 0x400}}) r4 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000003c0)={0x0, 0x3e6, 0x61, [], &(0x7f0000000380)=0x3}) clock_gettime(0x2, &(0x7f0000000400)) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000440)) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x2) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20011) 11:31:20 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = eventfd2(0x80, 0x800) write$eventfd(r0, &(0x7f0000000040)=0x8af, 0x8) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)=""/234, &(0x7f0000000180)=0xea) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x4e, 0x800, 0x2, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = accept(r1, 0x0, &(0x7f0000000680)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2f}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x261}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x38}}, 0x44040054) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000800)={0x1f, "b56b8f63a5e9885f56f46b40d3adfc24de80153f67be0ac7796ec3e470795d0a", 0x1}) write$eventfd(r0, &(0x7f0000000840)=0x1, 0x8) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000880)={0x7, 0x3, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x2, 0x1, 0x3f, 0x7f, 0x0, 0x50, "e3fa50b8"}, 0x8000, 0x3, @userptr=0x3, 0x8000}) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000900)) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000c40)={&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/246, 0xf6}, {&(0x7f0000000ac0)=""/73, 0x49}, {&(0x7f0000000b40)=""/61, 0x3d}, {&(0x7f0000000b80)=""/114, 0x72}], 0x4}, 0x142) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000c80)={0x1, 0x0, {0x7, 0x9, 0xe04, 0xfffffbff}}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000cc0)='net_prio.ifpriomap\x00', 0x2, 0x0) socketpair(0x2b, 0x80000, 0x2, &(0x7f0000000d00)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r6, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf8, r4, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0x200c8481) 11:31:20 executing program 3: socketpair(0x29, 0xab4e7e39796e6e6, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x404809d) recvmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1, &(0x7f00000002c0)=""/32, 0x20}, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000540)={0xa2e5, 0x2, 0x4, 0x70000, 0x0, {0x0, 0x2710}, {0x2, 0x0, 0xe5, 0x1, 0x0, 0x2, "11422f95"}, 0x200, 0x3, @planes=&(0x7f0000000500)={0x4, 0x5, @mem_offset=0x1e, 0x101}, 0x3c9f}) socketpair(0xf, 0x0, 0x1000, &(0x7f0000001a00)={0xffffffffffffffff}) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000001a40)=0x1, 0x4) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0xb526835ac826e3fe) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl0\x00', r3, 0x2f, 0x0, 0x1, 0x8, 0x78, @empty, @empty, 0x700, 0x700, 0x1ff, 0x7}}) r8 = syz_open_dev$radio(&(0x7f0000001b40)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FBUF(r8, 0x8030560a, &(0x7f0000001c80)={0x20, 0x0, &(0x7f0000001b80)="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", {0x84, 0x6, 0x20385655, 0x8, 0x100, 0x2, 0x6, 0x2}}) ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f0000001cc0)={0x4, {0x0, 0x5, 0x9, 0x2}, {0x2d, 0x7, 0x175}, {0x4, 0x2}}) socket$inet_sctp(0x2, 0x1, 0x84) read$eventfd(r6, &(0x7f0000001d00), 0x8) getpeername(r2, &(0x7f0000001d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000001dc0)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001e80)={'syztnl0\x00', &(0x7f0000001e00)={'syztnl1\x00', r7, 0x4, 0x6, 0x4, 0x4, 0x4, @dev={0xfe, 0x80, [], 0x1d}, @mcast1, 0x80, 0x10, 0xfa41, 0x8}}) 11:31:20 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x18ce97bd1ff148fc) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pptp, &(0x7f0000000200)=0x80) r2 = accept$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000002c0)={0x8, 0x10001, @value=0xfe6}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000300)={0x3, {0x7f, 0x6, 0x1, 0x3}}) r3 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f00000003c0)={0x0, 0x200, 0x200, [], &(0x7f0000000380)=0x80}) r4 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, {0x6, 0x3, 0x80000000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r5, 0x29, 0x0, 0x8, 0x1, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x40, 0x89cb, 0x4}}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10000}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048010) getpeername(r2, &(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000c40)=0x80) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xac, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xac}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000e00)={0x0, @bt={0x4, 0xcf, 0x1, 0x1, 0x10000, 0x5, 0x6, 0x0, 0x1f, 0xffff, 0x759, 0x692d, 0x9, 0xff, 0x18, 0x5, {0x8257, 0x7fff}, 0xa4, 0x3f}}) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getpeername(r8, &(0x7f0000000ec0)=@generic, &(0x7f0000000f40)=0x80) 11:31:20 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x4000, 0x3, {r0, r1/1000+10000}, {0x2, 0x2, 0x9f, 0x9, 0x3, 0x6, "079f3dbe"}, 0x7, 0x2, @offset=0xc42, 0x7, 0x0, 0xffffffffffffffff}) r3 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000080) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, {0xd6, 0x0, 0x41, 0x26}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000540)={0x8, 0xa, &(0x7f0000000480)="47811b8504214adc0d95e80a8469a4b58a1835090f9e54b9380dde63e7cc5d55543464ebea88d2c6f72a621319439eca3d13d0d4336fea65f0880f603971e51ffc231c44098e04d989c7ea33030bffcd4aae11bb8800fec1bfe8d8edbd080e8eec5e728692a14a04201eddd483628a3ac592d7bed731544d3c52f63ad1897440802501bf8bd6f39580d6f0df4cd07938e24bcd5f3f08eb09eca00d553c751f3f08ba315877fd208b464fbfb9ce41e02f0902b5d3cf40ac034c3148", {0x6, 0x5, 0x30314752, 0x3, 0x8, 0x5568, 0x5, 0xfffffffe}}) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000580)) accept4$phonet_pipe(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80000) connect$phonet_pipe(r3, &(0x7f0000000640)={0x23, 0x1, 0x0, 0x80}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f00000006c0)) pselect6(0x40, &(0x7f0000000700)={0x1dd, 0x7, 0x3f, 0x3, 0x4, 0x401, 0x200800000000000, 0x5}, &(0x7f0000000740)={0x9, 0x5, 0xfff, 0x3, 0x7, 0x4, 0x200, 0xffffffff00000000}, &(0x7f0000000780)={0x9, 0x5, 0x5, 0xd0, 0x3d9, 0x101, 0x1f, 0x5}, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800)={[0x3]}, 0x8}) syz_open_dev$radio(&(0x7f0000000880)='/dev/radio#\x00', 0x1, 0x2) socket$inet6_dccp(0xa, 0x6, 0x0) 11:31:20 executing program 3: socketpair(0x29, 0xab4e7e39796e6e6, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x404809d) recvmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1, &(0x7f00000002c0)=""/32, 0x20}, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000540)={0xa2e5, 0x2, 0x4, 0x70000, 0x0, {0x0, 0x2710}, {0x2, 0x0, 0xe5, 0x1, 0x0, 0x2, "11422f95"}, 0x200, 0x3, @planes=&(0x7f0000000500)={0x4, 0x5, @mem_offset=0x1e, 0x101}, 0x3c9f}) socketpair(0xf, 0x0, 0x1000, &(0x7f0000001a00)={0xffffffffffffffff}) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000001a40)=0x1, 0x4) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0xb526835ac826e3fe) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl0\x00', r3, 0x2f, 0x0, 0x1, 0x8, 0x78, @empty, @empty, 0x700, 0x700, 0x1ff, 0x7}}) r7 = syz_open_dev$radio(&(0x7f0000001b40)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FBUF(r7, 0x8030560a, &(0x7f0000001c80)={0x20, 0x0, &(0x7f0000001b80)="66f164665b9d67525e2a001628a1e9f0eb453b240eab9cf1c758eb62cf1001727dd89852d5576910a129202ce4bf6da928e2275edad9e4659a10e955d6444bdbbe3035c12d72a8777f94e33ee69a58600910f8ae012926fa16cf68f0e5d235a0eceffe8ec66be24f4d62dbf039c41386c8fdafb96e96ff995a581e97f47b8f2ccc450a5e5b5fe70e61696871c3a8e84a95e6e6d55f16338d4908bb0b0e77442da44f141659b572da201760c250ba7134f7767091d6d327f12911bd8b40ea926406d641405e7322839c29cb96eb864cef4b552cac096480fc6bc80ae38765bd939de3849fbdf930fbffc1147d898c5aa8680f17b4080fb97ff78b55", {0x84, 0x6, 0x20385655, 0x8, 0x100, 0x2, 0x6, 0x2}}) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000001cc0)={0x4, {0x0, 0x5, 0x9, 0x2}, {0x2d, 0x7, 0x175}, {0x4, 0x2}}) socket$inet_sctp(0x2, 0x1, 0x84) read$eventfd(r6, &(0x7f0000001d00), 0x8) getpeername(r2, &(0x7f0000001d40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000001dc0)=0x80) 11:31:20 executing program 5: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x7fffffff, 0x8, 0x4, 0x4000, 0x1, {0x77359400}, {0x1, 0x2, 0x80, 0xff, 0x0, 0x1, "9a62b002"}, 0x4, 0x1, @userptr=0x6, 0x2}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0xc, @win={{0x5, 0x4, 0x9, 0x8}, 0x3, 0x2d, &(0x7f0000000340)={{0x0, 0x8, 0x1, 0x100}, &(0x7f0000000300)={{0xf2cf, 0x1092, 0x0, 0x7fff}, &(0x7f00000002c0)={{0x8, 0x1ff, 0x7f}}}}, 0x9, &(0x7f0000000380)="1329b539cf52ee8720306b5c5fe3e0536fdfb5c1b56c2052f9606b86e4083ac7eabbd4c582be425ce0203bababf7848fdffa24003f7cb1f557f485047cf81d3837cfd8e20b90ba64480bec99ef8955b2f06c8218556197da288bf26769ef86cd674747de3dbed3c62c78fa9bcf64ed264702fda91257aadc9022775c3c2edc2600a08cfdfb24848151269d6eed262d4adbc82f5cf7c41ccfd5a5eb96eb60752558c72d9e292bed845a2ba8e0fb5bb8dcfb45ed7dc589216bb8861018", 0x20}}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x184, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0xab, 0x5b, "123f9a74c27c27b1a76d355e824bbab5aa626b49adbd283e342c916b62871eb4737229ca3a581eb5c983cdbc269f3296511226fdc2cd475e9c418540eb8e0dcd7e5fa2977a5a574d7e1f208c22f481e0fa0b7dee1bd4cc6c17f9d73566c9b56a72ead5d5d3a98809f98e38e0089b96ddfb29142ca3c58a72fc02cdf6064d037cfbe8bef8a9658482e5f4cbeed044cd6a599d2be9bafedf53a809300e36fe278d75412931ddeb06"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffc1}, @NL80211_ATTR_FRAME_MATCH={0x9d, 0x5b, "cdee3ae02ef3aebceb719259eb66c29d13d2b46d8c5aa0da15be29f51b5bef6a136d80af547b7c011f7ff0d1bb7b6a474723bb4a7bef0b1cfe9c31ec4b91eb05de9f2b0a8938ffa39bff3451d86e4241a79289a4f3b5ce0bf8b55c662f0c1db7f16bfed097fef81e5ad6d5f9007281804ffa94c23b1424a88083f2e481db1cd9b3c4f910ac466f484bb1dabfd67ee07014d511d82e73ae3d38"}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000841) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x0) r3 = accept4$phonet_pipe(r2, &(0x7f00000009c0), &(0x7f0000000a00)=0x10, 0x80800) accept4$phonet_pipe(r3, &(0x7f0000000a40), &(0x7f0000000a80)=0x10, 0x80800) openat$userio(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/userio\x00', 0x8000, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000b00)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000b40)={0x4, 0x2, 0x3, {0x0, @pix_mp={0x8000, 0x0, 0x31364d4e, 0x3, 0x3, [{0x80, 0x8001}, {0x8001, 0x43c}, {0x4, 0x6}, {0x1, 0x1f}, {0x9}, {0x7, 0x40}, {0x1, 0x419f}, {0x8001, 0xfffffff7}], 0x7f, 0x81, 0x0, 0x0, 0x4}}, 0x4}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd92, 0x2}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = syz_open_dev$radio(&(0x7f0000000d80)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000dc0)={0xf4, 0x5, 0xfff, 0x0, 0x8, 0x20, 0x10001}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20040011) socket$pppoe(0x18, 0x1, 0x0) 11:31:20 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = eventfd2(0x80, 0x800) write$eventfd(r0, &(0x7f0000000040)=0x8af, 0x8) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)=""/234, &(0x7f0000000180)=0xea) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x4e, 0x800, 0x2, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = accept(r1, 0x0, &(0x7f0000000680)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2f}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x261}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x38}}, 0x44040054) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000800)={0x1f, "b56b8f63a5e9885f56f46b40d3adfc24de80153f67be0ac7796ec3e470795d0a", 0x1}) write$eventfd(r0, &(0x7f0000000840)=0x1, 0x8) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000880)={0x7, 0x3, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x2, 0x1, 0x3f, 0x7f, 0x0, 0x50, "e3fa50b8"}, 0x8000, 0x3, @userptr=0x3, 0x8000}) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000900)) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000c40)={&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/246, 0xf6}, {&(0x7f0000000ac0)=""/73, 0x49}, {&(0x7f0000000b40)=""/61, 0x3d}, {&(0x7f0000000b80)=""/114, 0x72}], 0x4}, 0x142) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000c80)={0x1, 0x0, {0x7, 0x9, 0xe04, 0xfffffbff}}) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000cc0)='net_prio.ifpriomap\x00', 0x2, 0x0) socketpair(0x2b, 0x80000, 0x2, &(0x7f0000000d00)) 11:31:20 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x18ce97bd1ff148fc) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pptp, &(0x7f0000000200)=0x80) r2 = accept$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000002c0)={0x8, 0x10001, @value=0xfe6}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000300)={0x3, {0x7f, 0x6, 0x1, 0x3}}) r3 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f00000003c0)={0x0, 0x200, 0x200, [], &(0x7f0000000380)=0x80}) r4 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, {0x6, 0x3, 0x80000000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r5, 0x29, 0x0, 0x8, 0x1, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x40, 0x89cb, 0x4}}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10000}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048010) getpeername(r2, &(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000c40)=0x80) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xac, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xac}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000e00)={0x0, @bt={0x4, 0xcf, 0x1, 0x1, 0x10000, 0x5, 0x6, 0x0, 0x1f, 0xffff, 0x759, 0x692d, 0x9, 0xff, 0x18, 0x5, {0x8257, 0x7fff}, 0xa4, 0x3f}}) getpeername(0xffffffffffffffff, &(0x7f0000000ec0)=@generic, &(0x7f0000000f40)=0x80) 11:31:20 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x4000, 0x3, {r0, r1/1000+10000}, {0x2, 0x2, 0x9f, 0x9, 0x3, 0x6, "079f3dbe"}, 0x7, 0x2, @offset=0xc42, 0x7, 0x0, 0xffffffffffffffff}) r3 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000080) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, {0xd6, 0x0, 0x41, 0x26}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000540)={0x8, 0xa, &(0x7f0000000480)="47811b8504214adc0d95e80a8469a4b58a1835090f9e54b9380dde63e7cc5d55543464ebea88d2c6f72a621319439eca3d13d0d4336fea65f0880f603971e51ffc231c44098e04d989c7ea33030bffcd4aae11bb8800fec1bfe8d8edbd080e8eec5e728692a14a04201eddd483628a3ac592d7bed731544d3c52f63ad1897440802501bf8bd6f39580d6f0df4cd07938e24bcd5f3f08eb09eca00d553c751f3f08ba315877fd208b464fbfb9ce41e02f0902b5d3cf40ac034c3148", {0x6, 0x5, 0x30314752, 0x3, 0x8, 0x5568, 0x5, 0xfffffffe}}) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000580)) accept4$phonet_pipe(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80000) connect$phonet_pipe(r3, &(0x7f0000000640)={0x23, 0x1, 0x0, 0x80}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f00000006c0)) pselect6(0x40, &(0x7f0000000700)={0x1dd, 0x7, 0x3f, 0x3, 0x4, 0x401, 0x200800000000000, 0x5}, &(0x7f0000000740)={0x9, 0x5, 0xfff, 0x3, 0x7, 0x4, 0x200, 0xffffffff00000000}, &(0x7f0000000780)={0x9, 0x5, 0x5, 0xd0, 0x3d9, 0x101, 0x1f, 0x5}, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000840)={&(0x7f0000000800)={[0x3]}, 0x8}) socket$inet6_dccp(0xa, 0x6, 0x0) 11:31:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x8, 0x101, 0x6, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8007, 0x80, 0x0, 0x9}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair(0x4, 0xa, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', r1, 0x29, 0x4, 0xc7, 0x0, 0x6a, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x8080, 0x400}}) r4 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000003c0)={0x0, 0x3e6, 0x61, [], &(0x7f0000000380)=0x3}) clock_gettime(0x2, &(0x7f0000000400)) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000440)) getsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000500), &(0x7f0000000540)=0x4) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20011) 11:31:20 executing program 3: socketpair(0x29, 0xab4e7e39796e6e6, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x404809d) recvmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1, &(0x7f00000002c0)=""/32, 0x20}, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000540)={0xa2e5, 0x2, 0x4, 0x70000, 0x0, {0x0, 0x2710}, {0x2, 0x0, 0xe5, 0x1, 0x0, 0x2, "11422f95"}, 0x200, 0x3, @planes=&(0x7f0000000500)={0x4, 0x5, @mem_offset=0x1e, 0x101}, 0x3c9f}) socketpair(0xf, 0x0, 0x1000, &(0x7f0000001a00)={0xffffffffffffffff}) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000001a40)=0x1, 0x4) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0xb526835ac826e3fe) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl0\x00', r3, 0x2f, 0x0, 0x1, 0x8, 0x78, @empty, @empty, 0x700, 0x700, 0x1ff, 0x7}}) r7 = syz_open_dev$radio(&(0x7f0000001b40)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FBUF(r7, 0x8030560a, &(0x7f0000001c80)={0x20, 0x0, &(0x7f0000001b80)="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", {0x84, 0x6, 0x20385655, 0x8, 0x100, 0x2, 0x6, 0x2}}) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000001cc0)={0x4, {0x0, 0x5, 0x9, 0x2}, {0x2d, 0x7, 0x175}, {0x4, 0x2}}) socket$inet_sctp(0x2, 0x1, 0x84) read$eventfd(r6, &(0x7f0000001d00), 0x8) 11:31:20 executing program 2: read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = eventfd2(0x80, 0x800) write$eventfd(r0, &(0x7f0000000040)=0x8af, 0x8) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xe, &(0x7f0000000080)=""/234, &(0x7f0000000180)=0xea) r1 = socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x4e, 0x800, 0x2, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = accept(r1, 0x0, &(0x7f0000000680)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700)='nl80211\x00') sendmsg$NL80211_CMD_NOTIFY_RADAR(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2f}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x261}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]}, 0x38}}, 0x44040054) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000800)={0x1f, "b56b8f63a5e9885f56f46b40d3adfc24de80153f67be0ac7796ec3e470795d0a", 0x1}) write$eventfd(r0, &(0x7f0000000840)=0x1, 0x8) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000880)={0x7, 0x3, 0x4, 0x10000, 0x6, {0x0, 0x2710}, {0x2, 0x1, 0x3f, 0x7f, 0x0, 0x50, "e3fa50b8"}, 0x8000, 0x3, @userptr=0x3, 0x8000}) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000900)) r5 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r5, &(0x7f0000000c40)={&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/246, 0xf6}, {&(0x7f0000000ac0)=""/73, 0x49}, {&(0x7f0000000b40)=""/61, 0x3d}, {&(0x7f0000000b80)=""/114, 0x72}], 0x4}, 0x142) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000c80)={0x1, 0x0, {0x7, 0x9, 0xe04, 0xfffffbff}}) socketpair(0x2b, 0x80000, 0x2, &(0x7f0000000d00)) 11:31:20 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x18ce97bd1ff148fc) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pptp, &(0x7f0000000200)=0x80) r2 = accept$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000002c0)={0x8, 0x10001, @value=0xfe6}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000300)={0x3, {0x7f, 0x6, 0x1, 0x3}}) r3 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f00000003c0)={0x0, 0x200, 0x200, [], &(0x7f0000000380)=0x80}) r4 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, {0x6, 0x3, 0x80000000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r5, 0x29, 0x0, 0x8, 0x1, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x40, 0x89cb, 0x4}}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10000}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048010) getpeername(r2, &(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000c40)=0x80) sendmsg$TIPC_NL_BEARER_ADD(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xac, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xac}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000e00)={0x0, @bt={0x4, 0xcf, 0x1, 0x1, 0x10000, 0x5, 0x6, 0x0, 0x1f, 0xffff, 0x759, 0x692d, 0x9, 0xff, 0x18, 0x5, {0x8257, 0x7fff}, 0xa4, 0x3f}}) getpeername(0xffffffffffffffff, &(0x7f0000000ec0)=@generic, &(0x7f0000000f40)=0x80) 11:31:20 executing program 5: ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x7fffffff, 0x8, 0x4, 0x4000, 0x1, {0x77359400}, {0x1, 0x2, 0x80, 0xff, 0x0, 0x1, "9a62b002"}, 0x4, 0x1, @userptr=0x6, 0x2}) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0xc, @win={{0x5, 0x4, 0x9, 0x8}, 0x3, 0x2d, &(0x7f0000000340)={{0x0, 0x8, 0x1, 0x100}, &(0x7f0000000300)={{0xf2cf, 0x1092, 0x0, 0x7fff}, &(0x7f00000002c0)={{0x8, 0x1ff, 0x7f}}}}, 0x9, &(0x7f0000000380)="1329b539cf52ee8720306b5c5fe3e0536fdfb5c1b56c2052f9606b86e4083ac7eabbd4c582be425ce0203bababf7848fdffa24003f7cb1f557f485047cf81d3837cfd8e20b90ba64480bec99ef8955b2f06c8218556197da288bf26769ef86cd674747de3dbed3c62c78fa9bcf64ed264702fda91257aadc9022775c3c2edc2600a08cfdfb24848151269d6eed262d4adbc82f5cf7c41ccfd5a5eb96eb60752558c72d9e292bed845a2ba8e0fb5bb8dcfb45ed7dc589216bb8861018", 0x20}}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x184, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x80}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0xab, 0x5b, "123f9a74c27c27b1a76d355e824bbab5aa626b49adbd283e342c916b62871eb4737229ca3a581eb5c983cdbc269f3296511226fdc2cd475e9c418540eb8e0dcd7e5fa2977a5a574d7e1f208c22f481e0fa0b7dee1bd4cc6c17f9d73566c9b56a72ead5d5d3a98809f98e38e0089b96ddfb29142ca3c58a72fc02cdf6064d037cfbe8bef8a9658482e5f4cbeed044cd6a599d2be9bafedf53a809300e36fe278d75412931ddeb06"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffc1}, @NL80211_ATTR_FRAME_MATCH={0x9d, 0x5b, "cdee3ae02ef3aebceb719259eb66c29d13d2b46d8c5aa0da15be29f51b5bef6a136d80af547b7c011f7ff0d1bb7b6a474723bb4a7bef0b1cfe9c31ec4b91eb05de9f2b0a8938ffa39bff3451d86e4241a79289a4f3b5ce0bf8b55c662f0c1db7f16bfed097fef81e5ad6d5f9007281804ffa94c23b1424a88083f2e481db1cd9b3c4f910ac466f484bb1dabfd67ee07014d511d82e73ae3d38"}]}, 0x184}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000841) r2 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x0) r3 = accept4$phonet_pipe(r2, &(0x7f00000009c0), &(0x7f0000000a00)=0x10, 0x80800) accept4$phonet_pipe(r3, &(0x7f0000000a40), &(0x7f0000000a80)=0x10, 0x80800) openat$userio(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/userio\x00', 0x8000, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000b00)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000b40)={0x4, 0x2, 0x3, {0x0, @pix_mp={0x8000, 0x0, 0x31364d4e, 0x3, 0x3, [{0x80, 0x8001}, {0x8001, 0x43c}, {0x4, 0x6}, {0x1, 0x1f}, {0x9}, {0x7, 0x40}, {0x1, 0x419f}, {0x8001, 0xfffffff7}], 0x7f, 0x81, 0x0, 0x0, 0x4}}, 0x4}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd92, 0x2}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r5 = syz_open_dev$radio(&(0x7f0000000d80)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000dc0)={0xf4, 0x5, 0xfff, 0x0, 0x8, 0x20, 0x10001}) socket$pppoe(0x18, 0x1, 0x0) 11:31:20 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x4000, 0x3, {r0, r1/1000+10000}, {0x2, 0x2, 0x9f, 0x9, 0x3, 0x6, "079f3dbe"}, 0x7, 0x2, @offset=0xc42, 0x7, 0x0, 0xffffffffffffffff}) r3 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@ipx, &(0x7f0000000140)=0x80) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000080) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, {0xd6, 0x0, 0x41, 0x26}}) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r4 = syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_FBUF(r4, 0x8030560a, &(0x7f0000000540)={0x8, 0xa, &(0x7f0000000480)="47811b8504214adc0d95e80a8469a4b58a1835090f9e54b9380dde63e7cc5d55543464ebea88d2c6f72a621319439eca3d13d0d4336fea65f0880f603971e51ffc231c44098e04d989c7ea33030bffcd4aae11bb8800fec1bfe8d8edbd080e8eec5e728692a14a04201eddd483628a3ac592d7bed731544d3c52f63ad1897440802501bf8bd6f39580d6f0df4cd07938e24bcd5f3f08eb09eca00d553c751f3f08ba315877fd208b464fbfb9ce41e02f0902b5d3cf40ac034c3148", {0x6, 0x5, 0x30314752, 0x3, 0x8, 0x5568, 0x5, 0xfffffffe}}) ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000580)) accept4$phonet_pipe(r3, &(0x7f00000005c0), &(0x7f0000000600)=0x10, 0x80000) connect$phonet_pipe(r3, &(0x7f0000000640)={0x23, 0x1, 0x0, 0x80}, 0x10) r5 = syz_open_dev$radio(&(0x7f0000000680)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f00000006c0)) socket$inet6_dccp(0xa, 0x6, 0x0) 11:31:20 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x8, 0x101, 0x6, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8007, 0x80, 0x0, 0x9}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair(0x4, 0xa, 0x2, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getpeername$l2tp(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @initdev}, &(0x7f0000000240)=0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', r1, 0x29, 0x4, 0xc7, 0x0, 0x6a, @loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8, 0x8080, 0x400}}) r4 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EDID(r4, 0xc0285629, &(0x7f00000003c0)={0x0, 0x3e6, 0x61, [], &(0x7f0000000380)=0x3}) clock_gettime(0x2, &(0x7f0000000400)) ioctl$VIDIOC_G_JPEGCOMP(r4, 0x808c563d, &(0x7f0000000440)) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x400, 0x57}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x20011) 11:31:20 executing program 3: socketpair(0x29, 0xab4e7e39796e6e6, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x404809d) recvmsg$can_raw(r0, &(0x7f0000000300)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/138, 0x8a}], 0x1, &(0x7f00000002c0)=""/32, 0x20}, 0x0) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000400)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000540)={0xa2e5, 0x2, 0x4, 0x70000, 0x0, {0x0, 0x2710}, {0x2, 0x0, 0xe5, 0x1, 0x0, 0x2, "11422f95"}, 0x200, 0x3, @planes=&(0x7f0000000500)={0x4, 0x5, @mem_offset=0x1e, 0x101}, 0x3c9f}) socketpair(0xf, 0x0, 0x1000, &(0x7f0000001a00)={0xffffffffffffffff}) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000001a40)=0x1, 0x4) ioctl$VIDIOC_S_PRIORITY(0xffffffffffffffff, 0x40045644, 0xb526835ac826e3fe) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f0000001b00)={'ip6_vti0\x00', &(0x7f0000001a80)={'syztnl0\x00', r3, 0x2f, 0x0, 0x1, 0x8, 0x78, @empty, @empty, 0x700, 0x700, 0x1ff, 0x7}}) r7 = syz_open_dev$radio(&(0x7f0000001b40)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_FBUF(r7, 0x8030560a, &(0x7f0000001c80)={0x20, 0x0, &(0x7f0000001b80)="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", {0x84, 0x6, 0x20385655, 0x8, 0x100, 0x2, 0x6, 0x2}}) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000001cc0)={0x4, {0x0, 0x5, 0x9, 0x2}, {0x2d, 0x7, 0x175}, {0x4, 0x2}}) read$eventfd(r6, &(0x7f0000001d00), 0x8) 11:31:20 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x18ce97bd1ff148fc) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pptp, &(0x7f0000000200)=0x80) r2 = accept$phonet_pipe(r1, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000002c0)={0x8, 0x10001, @value=0xfe6}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000300)={0x3, {0x7f, 0x6, 0x1, 0x3}}) r3 = syz_open_dev$radio(&(0x7f0000000340)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f00000003c0)={0x0, 0x200, 0x200, [], &(0x7f0000000380)=0x80}) r4 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r4, 0xc040563d, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, {0x6, 0x3, 0x80000000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000980)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'ip6gre0\x00', r5, 0x29, 0x0, 0x8, 0x1, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x40, 0x40, 0x89cb, 0x4}}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x10000}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048010) getpeername(r2, &(0x7f00000