78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
r3 = socket(0x27, 0x800, 0x7)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r4, 0x604, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffc1, 0x73}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24044040}, 0x10048000)
r6 = socket(0xf, 0x6, 0x9)
sendmsg$AUDIT_TRIM(r6, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3f6, 0x100, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x80040)
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000001000))
sendmsg$AUDIT_USER(r6, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x3ed, 0x1, 0x70bd29, 0x25dfdbfc, "b0b823128f4911edbca7d7e17f5775b06c61498f", ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x44, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4b1c}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

[  121.059066] audit: type=1326 audit(1664985913.857:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4032 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:05:13 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x492}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004000}, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80484}, 0x20000011)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810)
r4 = geteuid()
setresuid(0xee01, 0x0, r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x70, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x28}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x10, 0x3f2, 0x800, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x804)
r5 = pidfd_getfd(r0, r3, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x48044)

16:05:13 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2912)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x45}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000010)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0xf7, 0x7, 0x0, 0xf4, 0x0, 0x1000, 0x30000, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x10}, 0x40000, 0x0, 0x6, 0x4, 0x9, 0x101, 0xf209, 0x0, 0x3, 0x0, 0x401}, r5, 0x0, r4, 0x9)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x224, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf1, 0x43}}}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e1df4dd6d7c8341b5b64938031529ed2746bc078b46bbcec"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9af8c91153fe6625"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ed57bce8700dca9f33a0c92f845dc88b"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6c11ece3343cdcf351ce2d54be8a1e6d"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d1a6cde1f4d948d6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6295a57d52fad03c31e16155bcc1e6b8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="072c5cf030d0fa3c969db72514f03ce0a1ddf8ac0671e2c5094d2dfd500eb21e"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="69fc960679b1e3c926ed9ecaf603f9846972a5bb4dd50b4b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "072331ade8079eb2"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bf208c301a97569c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="297cd3f450f9723b7b71693f0fa497a1f5971469eef295bd"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d6c761d7b736d0b"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aa59e5bb062ad3608fbfbbedf0035252"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4008ea7ed26bcd2dd05a6ee8fef3687cbb483ae8e1392521"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4da69a640dd1e7fd42d4c7bf922cfe96523110cbd62a50d4ca77d86be2685d9b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1e6dc2994de2fdd44b344130e413631ac0617554f44836bb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1c854337f446e4c7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="52c683040fa9ddba967a01999fe7cd91"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d05a82ddc57316bee622abe0c7ecd2282bc89068a13408c946a3c3797a194c04"}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
read$char_usb(r5, &(0x7f0000000a00), 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xd4, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x21}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_SEQ={0x6, 0x4, "24bd"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY={0x54, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "b1d434277e326860fdbbb04e9c"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_SEQ={0x7, 0x4, "c12d7c"}, @NL80211_KEY_SEQ={0xf, 0x4, "1722ce3c25c2cf091a85fe"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0xa, 0x4, "835a2b638af0"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000008}, 0x20004081)

16:05:13 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096})
r3 = perf_event_open(&(0x7f0000001300)={0x4, 0x80, 0x8, 0x4, 0xc0, 0x5, 0x0, 0x1, 0xa0080, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0x8}, 0x400, 0x7, 0x4, 0x1, 0x3a2b, 0xffff, 0x40, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000001380)={0x5, 0x80, 0x81, 0x7a, 0x0, 0x8, 0x0, 0x7, 0x40020, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x23ea, 0x4, @perf_config_ext={0x8000, 0x10001}, 0x40, 0x5, 0x9, 0x3, 0x4, 0x7fff, 0xc7c, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0xa, r3, 0x2)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x814)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000015c0))
r4 = perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000016c0)={0x2, 0x80, 0x7f, 0x95, 0x4, 0xd7, 0x0, 0x100000000, 0x42000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x20}, 0x2044, 0xf76, 0x800, 0x7, 0xaa, 0x3, 0x6, 0x0, 0x80000001, 0x0, 0x6})
perf_event_open$cgroup(&(0x7f0000001780)={0x0, 0x80, 0x0, 0x9, 0x5, 0x40, 0x0, 0x1816947a, 0x100, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff8001, 0x4, @perf_bp={&(0x7f0000001740), 0xf}, 0x20000, 0x100000001, 0x6, 0x8, 0x3, 0xfe, 0x100, 0x0, 0x10001, 0x0, 0x800}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001900)={0x1, 0x80, 0x3, 0x0, 0x9, 0x1, 0x0, 0x2, 0x41000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f00000018c0), 0x1}, 0x1601, 0x8, 0x8, 0x0, 0x5800f816, 0xffff, 0x8, 0x0, 0x4, 0x0, 0x400})

16:05:14 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x492}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004000}, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80484}, 0x20000011)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810)
r4 = geteuid()
setresuid(0xee01, 0x0, r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x70, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x28}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x10, 0x3f2, 0x800, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x804)
r5 = pidfd_getfd(r0, r3, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x48044)

16:05:14 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
process_madvise(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="0a259cd191ce1d3e6669d5fcc32d0cb7a668baa8e0063506bcf1419f5bbf9c34c5ec9708e37e5a4c83d8fdb2df6056219d60362a8f8835ae0b0a", 0x3a}, {&(0x7f0000000300)="636b6e51a4cbb4cda78e72f6b7b29af58518ff7e89ad10c2f839421940e465682b0fd5ccb1441dbbf5496a4a7a4398428e1bd311c08a80b0afa2ef210efc2b2373efa1950329699eed2639b11830a9eb318396e99172eeb9f9a8131b63c4ed855a0e582093021398a71f21f6bbb2b82f1f7e525069f7520f79f1ff935c0ec64f853dd74db41726abcddad6ba685ab1a740c938f67f8227b7f7287e6728346c3c1d7f2b6c4a79c966eff7801c00ad70219c9e5660cd315fab4753e6e018f4671cee944aa77e1931bfb8f08d", 0xcb}], 0x2, 0x65, 0x0)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x10c, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r4 = socket$packet(0x11, 0xb9190275f86baf4a, 0x300)
setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f00000005c0)=0x8, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x3a}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000780))
sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3fb, 0xf00, 0x70bd29, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x800)

16:05:14 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x190, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xe0, r4, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdbe7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffe00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x43a6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1e8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80000000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x160}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1ff, 0x2cfc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd8f2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x48, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, 0x0, 0x208, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40880)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x3}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6a3af47}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x4000844)

16:05:14 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096})
r3 = perf_event_open(&(0x7f0000001300)={0x4, 0x80, 0x8, 0x4, 0xc0, 0x5, 0x0, 0x1, 0xa0080, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0x8}, 0x400, 0x7, 0x4, 0x1, 0x3a2b, 0xffff, 0x40, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000001380)={0x5, 0x80, 0x81, 0x7a, 0x0, 0x8, 0x0, 0x7, 0x40020, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x23ea, 0x4, @perf_config_ext={0x8000, 0x10001}, 0x40, 0x5, 0x9, 0x3, 0x4, 0x7fff, 0xc7c, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0xa, r3, 0x2)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x814)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000015c0))
r4 = perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000016c0)={0x2, 0x80, 0x7f, 0x95, 0x4, 0xd7, 0x0, 0x100000000, 0x42000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x20}, 0x2044, 0xf76, 0x800, 0x7, 0xaa, 0x3, 0x6, 0x0, 0x80000001, 0x0, 0x6})
perf_event_open$cgroup(&(0x7f0000001780)={0x0, 0x80, 0x0, 0x9, 0x5, 0x40, 0x0, 0x1816947a, 0x100, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff8001, 0x4, @perf_bp={&(0x7f0000001740), 0xf}, 0x20000, 0x100000001, 0x6, 0x8, 0x3, 0xfe, 0x100, 0x0, 0x10001, 0x0, 0x800}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000001900)={0x1, 0x80, 0x3, 0x0, 0x9, 0x1, 0x0, 0x2, 0x41000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f00000018c0), 0x1}, 0x1601, 0x8, 0x8, 0x0, 0x5800f816, 0xffff, 0x8, 0x0, 0x4, 0x0, 0x400})

16:05:14 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2912)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x45}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000010)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0xf7, 0x7, 0x0, 0xf4, 0x0, 0x1000, 0x30000, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x10}, 0x40000, 0x0, 0x6, 0x4, 0x9, 0x101, 0xf209, 0x0, 0x3, 0x0, 0x401}, r5, 0x0, r4, 0x9)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x224, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf1, 0x43}}}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e1df4dd6d7c8341b5b64938031529ed2746bc078b46bbcec"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9af8c91153fe6625"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ed57bce8700dca9f33a0c92f845dc88b"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6c11ece3343cdcf351ce2d54be8a1e6d"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d1a6cde1f4d948d6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6295a57d52fad03c31e16155bcc1e6b8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="072c5cf030d0fa3c969db72514f03ce0a1ddf8ac0671e2c5094d2dfd500eb21e"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="69fc960679b1e3c926ed9ecaf603f9846972a5bb4dd50b4b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "072331ade8079eb2"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bf208c301a97569c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="297cd3f450f9723b7b71693f0fa497a1f5971469eef295bd"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d6c761d7b736d0b"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aa59e5bb062ad3608fbfbbedf0035252"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4008ea7ed26bcd2dd05a6ee8fef3687cbb483ae8e1392521"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4da69a640dd1e7fd42d4c7bf922cfe96523110cbd62a50d4ca77d86be2685d9b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1e6dc2994de2fdd44b344130e413631ac0617554f44836bb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1c854337f446e4c7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="52c683040fa9ddba967a01999fe7cd91"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d05a82ddc57316bee622abe0c7ecd2282bc89068a13408c946a3c3797a194c04"}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
read$char_usb(r5, &(0x7f0000000a00), 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6)

16:05:14 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x492}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004000}, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80484}, 0x20000011)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810)
r4 = geteuid()
setresuid(0xee01, 0x0, r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x70, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x28}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x10, 0x3f2, 0x800, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x804)
r5 = pidfd_getfd(r0, r3, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000002f40)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x48044)

16:05:14 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096})
r3 = perf_event_open(&(0x7f0000001300)={0x4, 0x80, 0x8, 0x4, 0xc0, 0x5, 0x0, 0x1, 0xa0080, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0x8}, 0x400, 0x7, 0x4, 0x1, 0x3a2b, 0xffff, 0x40, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000001380)={0x5, 0x80, 0x81, 0x7a, 0x0, 0x8, 0x0, 0x7, 0x40020, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x23ea, 0x4, @perf_config_ext={0x8000, 0x10001}, 0x40, 0x5, 0x9, 0x3, 0x4, 0x7fff, 0xc7c, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0xa, r3, 0x2)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x814)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000015c0))
r4 = perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000016c0)={0x2, 0x80, 0x7f, 0x95, 0x4, 0xd7, 0x0, 0x100000000, 0x42000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x20}, 0x2044, 0xf76, 0x800, 0x7, 0xaa, 0x3, 0x6, 0x0, 0x80000001, 0x0, 0x6})
perf_event_open$cgroup(&(0x7f0000001780)={0x0, 0x80, 0x0, 0x9, 0x5, 0x40, 0x0, 0x1816947a, 0x100, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff8001, 0x4, @perf_bp={&(0x7f0000001740), 0xf}, 0x20000, 0x100000001, 0x6, 0x8, 0x3, 0xfe, 0x100, 0x0, 0x10001, 0x0, 0x800}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4)

16:05:25 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4005)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000008c0))
r4 = pidfd_getfd(r3, r3, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x10, 0x3f2, 0x400, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x41)
process_madvise(r1, &(0x7f0000001d80)=[{&(0x7f0000000a00)="0af0cc6a0221cd6f578d989f67ab5631c594cce04b56982b8cf7814f8c524547ba58e23afca1cb495e220e0546d57cd86a7d78432f679918b39c04579fe5700115bdc0809466eb324f4cfab3", 0x4c}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="d7888cc0ba2dd46ab3ff00704986935fe83e76585eec3206c78801", 0x1b}, {&(0x7f0000001ac0)="0ce1a9f1748b832ab690e6f396773a987a1d59a391ff22ae826ce58f633ad95ba5eb415e71b4589c756ef9812091461fbf60a7b65f7969dc41e1084d8de24ffb636553eb6f8163589ce09eacc439fa603ba558bf1deeb0f819a46a960faf20fcee3477e2b884e30171d1520b4ed3d64e0b336259f9cd3479fe83710e4ae887cbc3fb7f21462b00da6999627667a9dc50e2c7187c7bfbb35d2ce7cf2063f5c0245152bfb8d601ad97ea12d06aee2780809317ca60d9fe182781fc6b43c0af315e01d6cbae8b5bdf2fd918fec764cf2a09564df4e4ad9fd4bb0e37a506f696abe21969adfdf286", 0xe6}, {&(0x7f0000001bc0)="d8c04ec0d65e8299bd53c33d01a68727a3f1efe42b46b10ff563da5845575ac3f0d24440079a7b4b9816b1406bc3dc4513d3c877a98a506718cbdd472ed110415a895909b36055754406e23fa272c1c34da65737e75c3c37315aa04a8c068a09967fa7b4e6d1963c25dacc1b63247d127c1a64fd0cad5af619fbf29ada5d1e42ed63ef39ba744e54b3d2f7cfb1e1a4bfa2e3484cc84d6cfbe13d9dd35031abcfaf3e174e5bf10e6ec142a42d3bc0df97575e486596", 0xb5}, {&(0x7f0000001c80)="a3f5ffa6f1967e8b14b59846427c8fcb12feea5e407823178b943bd910b36bdedd9ff148060e55e119c4e0c2f30e20e6aaec6ac6e0f27bbe3f4e78a892714d570223c71190ed7f900526400a8de0b76394fae9667e5fff988488de5b4b31632d2b4f0144029c3c2e853817941d957a733d52b8a5cb12d5f6a3dc15092f8700269c5abad0fa8ce17b477d87a1d3a892e20d60f1", 0x93}, {&(0x7f0000001d40)="49f33c2e54ad89e9e2704ccc93a2f9d0462b774ca6c8816eef9b1f6fd0f8a8783990d01f80230dcdde77e5164e579e8ddb0ef970b0db38a428", 0x39}], 0x7, 0x64, 0x0)
r5 = socket(0x2c, 0x6, 0xdca)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, 0x1, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x40)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x59}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "ecedf5"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x800)

[  132.435095] audit: type=1326 audit(1664985925.233:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4102 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:05:25 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2912)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x45}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000010)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0xf7, 0x7, 0x0, 0xf4, 0x0, 0x1000, 0x30000, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x10}, 0x40000, 0x0, 0x6, 0x4, 0x9, 0x101, 0xf209, 0x0, 0x3, 0x0, 0x401}, r5, 0x0, r4, 0x9)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x224, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf1, 0x43}}}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e1df4dd6d7c8341b5b64938031529ed2746bc078b46bbcec"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9af8c91153fe6625"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ed57bce8700dca9f33a0c92f845dc88b"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6c11ece3343cdcf351ce2d54be8a1e6d"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d1a6cde1f4d948d6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6295a57d52fad03c31e16155bcc1e6b8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="072c5cf030d0fa3c969db72514f03ce0a1ddf8ac0671e2c5094d2dfd500eb21e"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="69fc960679b1e3c926ed9ecaf603f9846972a5bb4dd50b4b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "072331ade8079eb2"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bf208c301a97569c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="297cd3f450f9723b7b71693f0fa497a1f5971469eef295bd"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d6c761d7b736d0b"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aa59e5bb062ad3608fbfbbedf0035252"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4008ea7ed26bcd2dd05a6ee8fef3687cbb483ae8e1392521"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4da69a640dd1e7fd42d4c7bf922cfe96523110cbd62a50d4ca77d86be2685d9b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1e6dc2994de2fdd44b344130e413631ac0617554f44836bb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1c854337f446e4c7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="52c683040fa9ddba967a01999fe7cd91"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d05a82ddc57316bee622abe0c7ecd2282bc89068a13408c946a3c3797a194c04"}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
read$char_usb(r5, &(0x7f0000000a00), 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6)

16:05:25 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x190, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xe0, r4, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdbe7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffe00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x43a6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1e8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80000000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x160}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1ff, 0x2cfc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd8f2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x48, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, 0x0, 0x208, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40880)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:05:25 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
process_madvise(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="0a259cd191ce1d3e6669d5fcc32d0cb7a668baa8e0063506bcf1419f5bbf9c34c5ec9708e37e5a4c83d8fdb2df6056219d60362a8f8835ae0b0a", 0x3a}, {&(0x7f0000000300)="636b6e51a4cbb4cda78e72f6b7b29af58518ff7e89ad10c2f839421940e465682b0fd5ccb1441dbbf5496a4a7a4398428e1bd311c08a80b0afa2ef210efc2b2373efa1950329699eed2639b11830a9eb318396e99172eeb9f9a8131b63c4ed855a0e582093021398a71f21f6bbb2b82f1f7e525069f7520f79f1ff935c0ec64f853dd74db41726abcddad6ba685ab1a740c938f67f8227b7f7287e6728346c3c1d7f2b6c4a79c966eff7801c00ad70219c9e5660cd315fab4753e6e018f4671cee944aa77e1931bfb8f08d", 0xcb}], 0x2, 0x65, 0x0)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x10c, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r4 = socket$packet(0x11, 0xb9190275f86baf4a, 0x300)
setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f00000005c0)=0x8, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x3a}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000780))
sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)

16:05:25 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
r3 = socket(0x27, 0x800, 0x7)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r4, 0x604, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffc1, 0x73}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24044040}, 0x10048000)
r6 = socket(0xf, 0x6, 0x9)
sendmsg$AUDIT_TRIM(r6, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3f6, 0x100, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x80040)
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000001000))
sendmsg$AUDIT_USER(r6, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x3ed, 0x1, 0x70bd29, 0x25dfdbfc, "b0b823128f4911edbca7d7e17f5775b06c61498f", ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x44, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4b1c}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x81}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8000)

16:05:25 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096})
r3 = perf_event_open(&(0x7f0000001300)={0x4, 0x80, 0x8, 0x4, 0xc0, 0x5, 0x0, 0x1, 0xa0080, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0x8}, 0x400, 0x7, 0x4, 0x1, 0x3a2b, 0xffff, 0x40, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000001380)={0x5, 0x80, 0x81, 0x7a, 0x0, 0x8, 0x0, 0x7, 0x40020, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x23ea, 0x4, @perf_config_ext={0x8000, 0x10001}, 0x40, 0x5, 0x9, 0x3, 0x4, 0x7fff, 0xc7c, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0xa, r3, 0x2)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x814)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000015c0))
r4 = perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000016c0)={0x2, 0x80, 0x7f, 0x95, 0x4, 0xd7, 0x0, 0x100000000, 0x42000, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x20}, 0x2044, 0xf76, 0x800, 0x7, 0xaa, 0x3, 0x6, 0x0, 0x80000001, 0x0, 0x6})

16:05:25 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x492}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004000}, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80484}, 0x20000011)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810)
r4 = geteuid()
setresuid(0xee01, 0x0, r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x70, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x28}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x10, 0x3f2, 0x800, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x804)
pidfd_getfd(r0, r3, 0x0)

16:05:25 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000600)={0x1000, ""/4096})
rt_sigsuspend(&(0x7f0000001640)={[0x401]}, 0x8)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9adc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
r4 = socket(0x22, 0xa, 0x400)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x200040c1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x20000050)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x48, 0x453, 0x1, 0x70bd27, 0x25dfdbfc, "ce4c08659a6917b6677e66dd23648bbe36fa673543a7c6206a2fee5d32e0765b7b7db0f764102710c471f1bc95e064385aa5becce7", [""]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40000)

16:05:25 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096})
r3 = perf_event_open(&(0x7f0000001300)={0x4, 0x80, 0x8, 0x4, 0xc0, 0x5, 0x0, 0x1, 0xa0080, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0x8}, 0x400, 0x7, 0x4, 0x1, 0x3a2b, 0xffff, 0x40, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000001380)={0x5, 0x80, 0x81, 0x7a, 0x0, 0x8, 0x0, 0x7, 0x40020, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x23ea, 0x4, @perf_config_ext={0x8000, 0x10001}, 0x40, 0x5, 0x9, 0x3, 0x4, 0x7fff, 0xc7c, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0xa, r3, 0x2)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x814)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f00000015c0))
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)

16:05:25 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x190, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xe0, r4, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdbe7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffe00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x43a6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1e8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80000000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x160}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1ff, 0x2cfc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd8f2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x48, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x40, 0x0, 0x208, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40880)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:05:25 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096})
r3 = perf_event_open(&(0x7f0000001300)={0x4, 0x80, 0x8, 0x4, 0xc0, 0x5, 0x0, 0x1, 0xa0080, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0x8}, 0x400, 0x7, 0x4, 0x1, 0x3a2b, 0xffff, 0x40, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000001380)={0x5, 0x80, 0x81, 0x7a, 0x0, 0x8, 0x0, 0x7, 0x40020, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x23ea, 0x4, @perf_config_ext={0x8000, 0x10001}, 0x40, 0x5, 0x9, 0x3, 0x4, 0x7fff, 0xc7c, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0xa, r3, 0x2)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x814)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)

16:05:25 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2912)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x45}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000010)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0xf7, 0x7, 0x0, 0xf4, 0x0, 0x1000, 0x30000, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x10}, 0x40000, 0x0, 0x6, 0x4, 0x9, 0x101, 0xf209, 0x0, 0x3, 0x0, 0x401}, r5, 0x0, r4, 0x9)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x224, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf1, 0x43}}}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e1df4dd6d7c8341b5b64938031529ed2746bc078b46bbcec"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9af8c91153fe6625"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ed57bce8700dca9f33a0c92f845dc88b"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6c11ece3343cdcf351ce2d54be8a1e6d"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d1a6cde1f4d948d6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6295a57d52fad03c31e16155bcc1e6b8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="072c5cf030d0fa3c969db72514f03ce0a1ddf8ac0671e2c5094d2dfd500eb21e"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="69fc960679b1e3c926ed9ecaf603f9846972a5bb4dd50b4b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "072331ade8079eb2"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bf208c301a97569c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="297cd3f450f9723b7b71693f0fa497a1f5971469eef295bd"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d6c761d7b736d0b"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aa59e5bb062ad3608fbfbbedf0035252"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4008ea7ed26bcd2dd05a6ee8fef3687cbb483ae8e1392521"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4da69a640dd1e7fd42d4c7bf922cfe96523110cbd62a50d4ca77d86be2685d9b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1e6dc2994de2fdd44b344130e413631ac0617554f44836bb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1c854337f446e4c7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="52c683040fa9ddba967a01999fe7cd91"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d05a82ddc57316bee622abe0c7ecd2282bc89068a13408c946a3c3797a194c04"}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
read$char_usb(r5, &(0x7f0000000a00), 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6)

16:05:25 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
process_madvise(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="0a259cd191ce1d3e6669d5fcc32d0cb7a668baa8e0063506bcf1419f5bbf9c34c5ec9708e37e5a4c83d8fdb2df6056219d60362a8f8835ae0b0a", 0x3a}, {&(0x7f0000000300)="636b6e51a4cbb4cda78e72f6b7b29af58518ff7e89ad10c2f839421940e465682b0fd5ccb1441dbbf5496a4a7a4398428e1bd311c08a80b0afa2ef210efc2b2373efa1950329699eed2639b11830a9eb318396e99172eeb9f9a8131b63c4ed855a0e582093021398a71f21f6bbb2b82f1f7e525069f7520f79f1ff935c0ec64f853dd74db41726abcddad6ba685ab1a740c938f67f8227b7f7287e6728346c3c1d7f2b6c4a79c966eff7801c00ad70219c9e5660cd315fab4753e6e018f4671cee944aa77e1931bfb8f08d", 0xcb}], 0x2, 0x65, 0x0)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x10c, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r4 = socket$packet(0x11, 0xb9190275f86baf4a, 0x300)
setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f00000005c0)=0x8, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x3a}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000780))

16:05:25 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x492}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004000}, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80484}, 0x20000011)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810)
r4 = geteuid()
setresuid(0xee01, 0x0, r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x70, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x28}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000002e40)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x10, 0x3f2, 0x800, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x804)

16:05:25 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096})
r3 = perf_event_open(&(0x7f0000001300)={0x4, 0x80, 0x8, 0x4, 0xc0, 0x5, 0x0, 0x1, 0xa0080, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0x8}, 0x400, 0x7, 0x4, 0x1, 0x3a2b, 0xffff, 0x40, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000001380)={0x5, 0x80, 0x81, 0x7a, 0x0, 0x8, 0x0, 0x7, 0x40020, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x23ea, 0x4, @perf_config_ext={0x8000, 0x10001}, 0x40, 0x5, 0x9, 0x3, 0x4, 0x7fff, 0xc7c, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0xa, r3, 0x2)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x814)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)

16:05:25 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x190, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xe0, r4, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdbe7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffe00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x43a6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1e8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80000000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x160}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1ff, 0x2cfc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd8f2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x48, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:05:38 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000600)={0x1000, ""/4096})
rt_sigsuspend(&(0x7f0000001640)={[0x401]}, 0x8)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9adc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
r4 = socket(0x22, 0xa, 0x400)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x200040c1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x20000050)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x48, 0x453, 0x1, 0x70bd27, 0x25dfdbfc, "ce4c08659a6917b6677e66dd23648bbe36fa673543a7c6206a2fee5d32e0765b7b7db0f764102710c471f1bc95e064385aa5becce7", [""]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40000)

16:05:38 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
r3 = socket(0x27, 0x800, 0x7)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r4, 0x604, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffc1, 0x73}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24044040}, 0x10048000)
r6 = socket(0xf, 0x6, 0x9)
sendmsg$AUDIT_TRIM(r6, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3f6, 0x100, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x80040)
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000001000))
sendmsg$AUDIT_USER(r6, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x24, 0x3ed, 0x1, 0x70bd29, 0x25dfdbfc, "b0b823128f4911edbca7d7e17f5775b06c61498f", ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x0)

16:05:38 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
process_madvise(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="0a259cd191ce1d3e6669d5fcc32d0cb7a668baa8e0063506bcf1419f5bbf9c34c5ec9708e37e5a4c83d8fdb2df6056219d60362a8f8835ae0b0a", 0x3a}, {&(0x7f0000000300)="636b6e51a4cbb4cda78e72f6b7b29af58518ff7e89ad10c2f839421940e465682b0fd5ccb1441dbbf5496a4a7a4398428e1bd311c08a80b0afa2ef210efc2b2373efa1950329699eed2639b11830a9eb318396e99172eeb9f9a8131b63c4ed855a0e582093021398a71f21f6bbb2b82f1f7e525069f7520f79f1ff935c0ec64f853dd74db41726abcddad6ba685ab1a740c938f67f8227b7f7287e6728346c3c1d7f2b6c4a79c966eff7801c00ad70219c9e5660cd315fab4753e6e018f4671cee944aa77e1931bfb8f08d", 0xcb}], 0x2, 0x65, 0x0)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x10c, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r4 = socket$packet(0x11, 0xb9190275f86baf4a, 0x300)
setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f00000005c0)=0x8, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r3, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fffffff, 0x3a}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:05:38 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2912)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x45}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000010)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0xf7, 0x7, 0x0, 0xf4, 0x0, 0x1000, 0x30000, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x10}, 0x40000, 0x0, 0x6, 0x4, 0x9, 0x101, 0xf209, 0x0, 0x3, 0x0, 0x401}, r5, 0x0, r4, 0x9)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f00000009c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x224, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xf1, 0x43}}}}, [@NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e1df4dd6d7c8341b5b64938031529ed2746bc078b46bbcec"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9af8c91153fe6625"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ed57bce8700dca9f33a0c92f845dc88b"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6c11ece3343cdcf351ce2d54be8a1e6d"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d1a6cde1f4d948d6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6295a57d52fad03c31e16155bcc1e6b8"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7fff}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="072c5cf030d0fa3c969db72514f03ce0a1ddf8ac0671e2c5094d2dfd500eb21e"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="69fc960679b1e3c926ed9ecaf603f9846972a5bb4dd50b4b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "072331ade8079eb2"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bf208c301a97569c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="297cd3f450f9723b7b71693f0fa497a1f5971469eef295bd"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d6c761d7b736d0b"}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="aa59e5bb062ad3608fbfbbedf0035252"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4008ea7ed26bcd2dd05a6ee8fef3687cbb483ae8e1392521"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4da69a640dd1e7fd42d4c7bf922cfe96523110cbd62a50d4ca77d86be2685d9b"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1e6dc2994de2fdd44b344130e413631ac0617554f44836bb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1c854337f446e4c7"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="52c683040fa9ddba967a01999fe7cd91"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d05a82ddc57316bee622abe0c7ecd2282bc89068a13408c946a3c3797a194c04"}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4004}, 0x40000)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6)

16:05:38 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4005)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000008c0))
r4 = pidfd_getfd(r3, r3, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x10, 0x3f2, 0x400, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x41)
process_madvise(r1, &(0x7f0000001d80)=[{&(0x7f0000000a00)="0af0cc6a0221cd6f578d989f67ab5631c594cce04b56982b8cf7814f8c524547ba58e23afca1cb495e220e0546d57cd86a7d78432f679918b39c04579fe5700115bdc0809466eb324f4cfab3", 0x4c}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="d7888cc0ba2dd46ab3ff00704986935fe83e76585eec3206c78801", 0x1b}, {&(0x7f0000001ac0)="0ce1a9f1748b832ab690e6f396773a987a1d59a391ff22ae826ce58f633ad95ba5eb415e71b4589c756ef9812091461fbf60a7b65f7969dc41e1084d8de24ffb636553eb6f8163589ce09eacc439fa603ba558bf1deeb0f819a46a960faf20fcee3477e2b884e30171d1520b4ed3d64e0b336259f9cd3479fe83710e4ae887cbc3fb7f21462b00da6999627667a9dc50e2c7187c7bfbb35d2ce7cf2063f5c0245152bfb8d601ad97ea12d06aee2780809317ca60d9fe182781fc6b43c0af315e01d6cbae8b5bdf2fd918fec764cf2a09564df4e4ad9fd4bb0e37a506f696abe21969adfdf286", 0xe6}, {&(0x7f0000001bc0)="d8c04ec0d65e8299bd53c33d01a68727a3f1efe42b46b10ff563da5845575ac3f0d24440079a7b4b9816b1406bc3dc4513d3c877a98a506718cbdd472ed110415a895909b36055754406e23fa272c1c34da65737e75c3c37315aa04a8c068a09967fa7b4e6d1963c25dacc1b63247d127c1a64fd0cad5af619fbf29ada5d1e42ed63ef39ba744e54b3d2f7cfb1e1a4bfa2e3484cc84d6cfbe13d9dd35031abcfaf3e174e5bf10e6ec142a42d3bc0df97575e486596", 0xb5}, {&(0x7f0000001c80)="a3f5ffa6f1967e8b14b59846427c8fcb12feea5e407823178b943bd910b36bdedd9ff148060e55e119c4e0c2f30e20e6aaec6ac6e0f27bbe3f4e78a892714d570223c71190ed7f900526400a8de0b76394fae9667e5fff988488de5b4b31632d2b4f0144029c3c2e853817941d957a733d52b8a5cb12d5f6a3dc15092f8700269c5abad0fa8ce17b477d87a1d3a892e20d60f1", 0x93}, {&(0x7f0000001d40)="49f33c2e54ad89e9e2704ccc93a2f9d0462b774ca6c8816eef9b1f6fd0f8a8783990d01f80230dcdde77e5164e579e8ddb0ef970b0db38a428", 0x39}], 0x7, 0x64, 0x0)
r5 = socket(0x2c, 0x6, 0xdca)
[  146.142369] audit: type=1326 audit(1664985938.940:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4174 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, 0x1, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x40)
sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xd, 0x59}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "ecedf5"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x800)

16:05:38 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x492}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004000}, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80484}, 0x20000011)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810)
r4 = geteuid()
setresuid(0xee01, 0x0, r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x70, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x28}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

16:05:38 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096})
r3 = perf_event_open(&(0x7f0000001300)={0x4, 0x80, 0x8, 0x4, 0xc0, 0x5, 0x0, 0x1, 0xa0080, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0x8}, 0x400, 0x7, 0x4, 0x1, 0x3a2b, 0xffff, 0x40, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000001380)={0x5, 0x80, 0x81, 0x7a, 0x0, 0x8, 0x0, 0x7, 0x40020, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x23ea, 0x4, @perf_config_ext={0x8000, 0x10001}, 0x40, 0x5, 0x9, 0x3, 0x4, 0x7fff, 0xc7c, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0xa, r3, 0x2)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x814)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)

16:05:38 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x190, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xe0, r4, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdbe7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffe00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x43a6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1e8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80000000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x160}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1ff, 0x2cfc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd8f2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x48, 0x1, 0x8, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:05:38 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2912)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x45}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000010)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0xf7, 0x7, 0x0, 0xf4, 0x0, 0x1000, 0x30000, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x10}, 0x40000, 0x0, 0x6, 0x4, 0x9, 0x101, 0xf209, 0x0, 0x3, 0x0, 0x401}, r5, 0x0, r4, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6)

16:05:38 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096})
r3 = perf_event_open(&(0x7f0000001300)={0x4, 0x80, 0x8, 0x4, 0xc0, 0x5, 0x0, 0x1, 0xa0080, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0x8}, 0x400, 0x7, 0x4, 0x1, 0x3a2b, 0xffff, 0x40, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000001380)={0x5, 0x80, 0x81, 0x7a, 0x0, 0x8, 0x0, 0x7, 0x40020, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x23ea, 0x4, @perf_config_ext={0x8000, 0x10001}, 0x40, 0x5, 0x9, 0x3, 0x4, 0x7fff, 0xc7c, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0xa, r3, 0x2)
sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x814)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)

16:05:39 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2912)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x45}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000010)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
perf_event_open$cgroup(&(0x7f0000000640)={0x3, 0x80, 0xf7, 0x7, 0x0, 0xf4, 0x0, 0x1000, 0x30000, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x5, 0x10}, 0x40000, 0x0, 0x6, 0x4, 0x9, 0x101, 0xf209, 0x0, 0x3, 0x0, 0x401}, r5, 0x0, r4, 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6)

16:05:39 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
process_madvise(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="0a259cd191ce1d3e6669d5fcc32d0cb7a668baa8e0063506bcf1419f5bbf9c34c5ec9708e37e5a4c83d8fdb2df6056219d60362a8f8835ae0b0a", 0x3a}, {&(0x7f0000000300)="636b6e51a4cbb4cda78e72f6b7b29af58518ff7e89ad10c2f839421940e465682b0fd5ccb1441dbbf5496a4a7a4398428e1bd311c08a80b0afa2ef210efc2b2373efa1950329699eed2639b11830a9eb318396e99172eeb9f9a8131b63c4ed855a0e582093021398a71f21f6bbb2b82f1f7e525069f7520f79f1ff935c0ec64f853dd74db41726abcddad6ba685ab1a740c938f67f8227b7f7287e6728346c3c1d7f2b6c4a79c966eff7801c00ad70219c9e5660cd315fab4753e6e018f4671cee944aa77e1931bfb8f08d", 0xcb}], 0x2, 0x65, 0x0)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x10c, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r4 = socket$packet(0x11, 0xb9190275f86baf4a, 0x300)
setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f00000005c0)=0x8, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:05:39 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096})
r3 = perf_event_open(&(0x7f0000001300)={0x4, 0x80, 0x8, 0x4, 0xc0, 0x5, 0x0, 0x1, 0xa0080, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0x8}, 0x400, 0x7, 0x4, 0x1, 0x3a2b, 0xffff, 0x40, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000001380)={0x5, 0x80, 0x81, 0x7a, 0x0, 0x8, 0x0, 0x7, 0x40020, 0xf, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x23ea, 0x4, @perf_config_ext={0x8000, 0x10001}, 0x40, 0x5, 0x9, 0x3, 0x4, 0x7fff, 0xc7c, 0x0, 0x7, 0x0, 0x100000001}, 0x0, 0xa, r3, 0x2)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)

16:05:39 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x492}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004000}, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80484}, 0x20000011)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810)
r4 = geteuid()
setresuid(0xee01, 0x0, r4)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:05:39 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
process_madvise(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="0a259cd191ce1d3e6669d5fcc32d0cb7a668baa8e0063506bcf1419f5bbf9c34c5ec9708e37e5a4c83d8fdb2df6056219d60362a8f8835ae0b0a", 0x3a}, {&(0x7f0000000300)="636b6e51a4cbb4cda78e72f6b7b29af58518ff7e89ad10c2f839421940e465682b0fd5ccb1441dbbf5496a4a7a4398428e1bd311c08a80b0afa2ef210efc2b2373efa1950329699eed2639b11830a9eb318396e99172eeb9f9a8131b63c4ed855a0e582093021398a71f21f6bbb2b82f1f7e525069f7520f79f1ff935c0ec64f853dd74db41726abcddad6ba685ab1a740c938f67f8227b7f7287e6728346c3c1d7f2b6c4a79c966eff7801c00ad70219c9e5660cd315fab4753e6e018f4671cee944aa77e1931bfb8f08d", 0xcb}], 0x2, 0x65, 0x0)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x10c, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
r4 = socket$packet(0x11, 0xb9190275f86baf4a, 0x300)
setsockopt$packet_int(r4, 0x107, 0x10, &(0x7f00000005c0)=0x8, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:05:39 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2912)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x45}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000010)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6)

16:05:50 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4005)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000008c0))
r4 = pidfd_getfd(r3, r3, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x10, 0x3f2, 0x400, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x41)
process_madvise(r1, &(0x7f0000001d80)=[{&(0x7f0000000a00)="0af0cc6a0221cd6f578d989f67ab5631c594cce04b56982b8cf7814f8c524547ba58e23afca1cb495e220e0546d57cd86a7d78432f679918b39c04579fe5700115bdc0809466eb324f4cfab3", 0x4c}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="d7888cc0ba2dd46ab3ff00704986935fe83e76585eec3206c78801", 0x1b}, {&(0x7f0000001ac0)="0ce1a9f1748b832ab690e6f396773a987a1d59a391ff22ae826ce58f633ad95ba5eb415e71b4589c756ef9812091461fbf60a7b65f7969dc41e1084d8de24ffb636553eb6f8163589ce09eacc439fa603ba558bf1deeb0f819a46a960faf20fcee3477e2b884e30171d1520b4ed3d64e0b336259f9cd3479fe83710e4ae887cbc3fb7f21462b00da6999627667a9dc50e2c7187c7bfbb35d2ce7cf2063f5c0245152bfb8d601ad97ea12d06aee2780809317ca60d9fe182781fc6b43c0af315e01d6cbae8b5bdf2fd918fec764cf2a09564df4e4ad9fd4bb0e37a506f696abe21969adfdf286", 0xe6}, {&(0x7f0000001bc0)="d8c04ec0d65e8299bd53c33d01a68727a3f1efe42b46b10ff563da5845575ac3f0d24440079a7b4b9816b1406bc3dc4513d3c877a98a506718cbdd472ed110415a895909b36055754406e23fa272c1c34da65737e75c3c37315aa04a8c068a09967fa7b4e6d1963c25dacc1b63247d127c1a64fd0cad5af619fbf29ada5d1e42ed63ef39ba744e54b3d2f7cfb1e1a4bfa2e3484cc84d6cfbe13d9dd35031abcfaf3e174e5bf10e6ec142a42d3bc0df97575e486596", 0xb5}, {&(0x7f0000001c80)="a3f5ffa6f1967e8b14b59846427c8fcb12feea5e407823178b943bd910b36bdedd9ff148060e55e119c4e0c2f30e20e6aaec6ac6e0f27bbe3f4e78a892714d570223c71190ed7f900526400a8de0b76394fae9667e5fff988488de5b4b31632d2b4f0144029c3c2e853817941d957a733d52b8a5cb12d5f6a3dc15092f8700269c5abad0fa8ce17b477d87a1d3a892e20d60f1", 0x93}, {&(0x7f0000001d40)="49f33c2e54ad89e9e2704ccc93a2f9d0462b774ca6c8816eef9b1f6fd0f8a8783990d01f80230dcdde77e5164e579e8ddb0ef970b0db38a428", 0x39}], 0x7, 0x64, 0x0)
r5 = socket(0x2c, 0x6, 0xdca)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x1c, 0x1, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48800}, 0x40)

16:05:50 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000600)={0x1000, ""/4096})
rt_sigsuspend(&(0x7f0000001640)={[0x401]}, 0x8)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9adc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
r4 = socket(0x22, 0xa, 0x400)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x200040c1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x50}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x20000050)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

[  157.600664] audit: type=1326 audit(1664985950.399:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4230 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:05:50 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x190, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xe0, r4, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdbe7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffe00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x43a6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1e8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80000000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x160}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1ff, 0x2cfc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd8f2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:05:50 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096})
perf_event_open(&(0x7f0000001300)={0x4, 0x80, 0x8, 0x4, 0xc0, 0x5, 0x0, 0x1, 0xa0080, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x81, 0x8}, 0x400, 0x7, 0x4, 0x1, 0x3a2b, 0xffff, 0x40, 0x0, 0x3f, 0x0, 0x7}, 0xffffffffffffffff, 0xe, r1, 0x9)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)

16:05:50 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2912)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x45}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000010)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6)

16:05:50 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
r3 = socket(0x27, 0x800, 0x7)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r4, 0x604, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffc1, 0x73}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24044040}, 0x10048000)
r6 = socket(0xf, 0x6, 0x9)
sendmsg$AUDIT_TRIM(r6, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3f6, 0x100, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x80040)
ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f0000001000))

16:05:50 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
process_madvise(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="0a259cd191ce1d3e6669d5fcc32d0cb7a668baa8e0063506bcf1419f5bbf9c34c5ec9708e37e5a4c83d8fdb2df6056219d60362a8f8835ae0b0a", 0x3a}, {&(0x7f0000000300)="636b6e51a4cbb4cda78e72f6b7b29af58518ff7e89ad10c2f839421940e465682b0fd5ccb1441dbbf5496a4a7a4398428e1bd311c08a80b0afa2ef210efc2b2373efa1950329699eed2639b11830a9eb318396e99172eeb9f9a8131b63c4ed855a0e582093021398a71f21f6bbb2b82f1f7e525069f7520f79f1ff935c0ec64f853dd74db41726abcddad6ba685ab1a740c938f67f8227b7f7287e6728346c3c1d7f2b6c4a79c966eff7801c00ad70219c9e5660cd315fab4753e6e018f4671cee944aa77e1931bfb8f08d", 0xcb}], 0x2, 0x65, 0x0)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x10c, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
socket$packet(0x11, 0xb9190275f86baf4a, 0x300)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:05:50 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x492}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004000}, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80484}, 0x20000011)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810)
geteuid()
socket$nl_netfilter(0x10, 0x3, 0xc)

16:05:50 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f00000002c0)={0x1000, ""/4096})
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)

16:05:50 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2912)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x45}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000010)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6)

16:05:50 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
process_madvise(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="0a259cd191ce1d3e6669d5fcc32d0cb7a668baa8e0063506bcf1419f5bbf9c34c5ec9708e37e5a4c83d8fdb2df6056219d60362a8f8835ae0b0a", 0x3a}, {&(0x7f0000000300)="636b6e51a4cbb4cda78e72f6b7b29af58518ff7e89ad10c2f839421940e465682b0fd5ccb1441dbbf5496a4a7a4398428e1bd311c08a80b0afa2ef210efc2b2373efa1950329699eed2639b11830a9eb318396e99172eeb9f9a8131b63c4ed855a0e582093021398a71f21f6bbb2b82f1f7e525069f7520f79f1ff935c0ec64f853dd74db41726abcddad6ba685ab1a740c938f67f8227b7f7287e6728346c3c1d7f2b6c4a79c966eff7801c00ad70219c9e5660cd315fab4753e6e018f4671cee944aa77e1931bfb8f08d", 0xcb}], 0x2, 0x65, 0x0)
r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r3, 0x10c, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:05:50 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
r1 = perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x2, 0x51, 0x6, 0x0, 0x3, 0x80000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1, 0x37, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x5, 0x0, 0x6}, 0x0, 0xa, r1, 0x8)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, r2, 0x1)

16:05:50 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2912)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x130}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x45}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x20000010)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6)

16:05:50 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x80, 0x9, 0xfa, 0x1f, 0x4, 0x0, 0x101, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000200), 0x8}, 0x11033, 0x5, 0x7, 0x5, 0x9, 0x6ce0, 0x8000, 0x0, 0x53, 0x0, 0xce2}, 0xffffffffffffffff, 0x3, r0, 0x8)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:05:50 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x2912)
r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6)

16:05:50 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
process_madvise(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="0a259cd191ce1d3e6669d5fcc32d0cb7a668baa8e0063506bcf1419f5bbf9c34c5ec9708e37e5a4c83d8fdb2df6056219d60362a8f8835ae0b0a", 0x3a}, {&(0x7f0000000300)="636b6e51a4cbb4cda78e72f6b7b29af58518ff7e89ad10c2f839421940e465682b0fd5ccb1441dbbf5496a4a7a4398428e1bd311c08a80b0afa2ef210efc2b2373efa1950329699eed2639b11830a9eb318396e99172eeb9f9a8131b63c4ed855a0e582093021398a71f21f6bbb2b82f1f7e525069f7520f79f1ff935c0ec64f853dd74db41726abcddad6ba685ab1a740c938f67f8227b7f7287e6728346c3c1d7f2b6c4a79c966eff7801c00ad70219c9e5660cd315fab4753e6e018f4671cee944aa77e1931bfb8f08d", 0xcb}], 0x2, 0x65, 0x0)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:06:03 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7ff)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:06:03 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x190, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xe0, r4, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdbe7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffe00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x43a6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1e8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80000000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x160}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1ff, 0x2cfc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd8f2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:06:03 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000600)={0x1000, ""/4096})
rt_sigsuspend(&(0x7f0000001640)={[0x401]}, 0x8)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9adc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
r4 = socket(0x22, 0xa, 0x400)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x200040c1)
socket$nl_generic(0x10, 0x3, 0x10)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:06:03 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x492}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004000}, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80484}, 0x20000011)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:06:03 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x40, 0x0)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x6)

[  170.818452] audit: type=1326 audit(1664985963.616:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4299 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:06:03 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
process_madvise(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="0a259cd191ce1d3e6669d5fcc32d0cb7a668baa8e0063506bcf1419f5bbf9c34c5ec9708e37e5a4c83d8fdb2df6056219d60362a8f8835ae0b0a", 0x3a}, {&(0x7f0000000300)="636b6e51a4cbb4cda78e72f6b7b29af58518ff7e89ad10c2f839421940e465682b0fd5ccb1441dbbf5496a4a7a4398428e1bd311c08a80b0afa2ef210efc2b2373efa1950329699eed2639b11830a9eb318396e99172eeb9f9a8131b63c4ed855a0e582093021398a71f21f6bbb2b82f1f7e525069f7520f79f1ff935c0ec64f853dd74db41726abcddad6ba685ab1a740c938f67f8227b7f7287e6728346c3c1d7f2b6c4a79c966eff7801c00ad70219c9e5660cd315fab4753e6e018f4671cee944aa77e1931bfb8f08d", 0xcb}], 0x2, 0x65, 0x0)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:06:03 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4005)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000008c0))
r4 = pidfd_getfd(r3, r3, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x10, 0x3f2, 0x400, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x41)
process_madvise(r1, &(0x7f0000001d80)=[{&(0x7f0000000a00)="0af0cc6a0221cd6f578d989f67ab5631c594cce04b56982b8cf7814f8c524547ba58e23afca1cb495e220e0546d57cd86a7d78432f679918b39c04579fe5700115bdc0809466eb324f4cfab3", 0x4c}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="d7888cc0ba2dd46ab3ff00704986935fe83e76585eec3206c78801", 0x1b}, {&(0x7f0000001ac0)="0ce1a9f1748b832ab690e6f396773a987a1d59a391ff22ae826ce58f633ad95ba5eb415e71b4589c756ef9812091461fbf60a7b65f7969dc41e1084d8de24ffb636553eb6f8163589ce09eacc439fa603ba558bf1deeb0f819a46a960faf20fcee3477e2b884e30171d1520b4ed3d64e0b336259f9cd3479fe83710e4ae887cbc3fb7f21462b00da6999627667a9dc50e2c7187c7bfbb35d2ce7cf2063f5c0245152bfb8d601ad97ea12d06aee2780809317ca60d9fe182781fc6b43c0af315e01d6cbae8b5bdf2fd918fec764cf2a09564df4e4ad9fd4bb0e37a506f696abe21969adfdf286", 0xe6}, {&(0x7f0000001bc0)="d8c04ec0d65e8299bd53c33d01a68727a3f1efe42b46b10ff563da5845575ac3f0d24440079a7b4b9816b1406bc3dc4513d3c877a98a506718cbdd472ed110415a895909b36055754406e23fa272c1c34da65737e75c3c37315aa04a8c068a09967fa7b4e6d1963c25dacc1b63247d127c1a64fd0cad5af619fbf29ada5d1e42ed63ef39ba744e54b3d2f7cfb1e1a4bfa2e3484cc84d6cfbe13d9dd35031abcfaf3e174e5bf10e6ec142a42d3bc0df97575e486596", 0xb5}, {&(0x7f0000001c80)="a3f5ffa6f1967e8b14b59846427c8fcb12feea5e407823178b943bd910b36bdedd9ff148060e55e119c4e0c2f30e20e6aaec6ac6e0f27bbe3f4e78a892714d570223c71190ed7f900526400a8de0b76394fae9667e5fff988488de5b4b31632d2b4f0144029c3c2e853817941d957a733d52b8a5cb12d5f6a3dc15092f8700269c5abad0fa8ce17b477d87a1d3a892e20d60f1", 0x93}, {&(0x7f0000001d40)="49f33c2e54ad89e9e2704ccc93a2f9d0462b774ca6c8816eef9b1f6fd0f8a8783990d01f80230dcdde77e5164e579e8ddb0ef970b0db38a428", 0x39}], 0x7, 0x64, 0x0)
socket(0x2c, 0x6, 0xdca)

16:06:03 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
r3 = socket(0x27, 0x800, 0x7)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r4, 0x604, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffc1, 0x73}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24044040}, 0x10048000)
r6 = socket(0xf, 0x6, 0x9)
sendmsg$AUDIT_TRIM(r6, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x10, 0x3f6, 0x100, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x80040)

16:06:03 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
process_madvise(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="0a259cd191ce1d3e6669d5fcc32d0cb7a668baa8e0063506bcf1419f5bbf9c34c5ec9708e37e5a4c83d8fdb2df6056219d60362a8f8835ae0b0a", 0x3a}, {&(0x7f0000000300)="636b6e51a4cbb4cda78e72f6b7b29af58518ff7e89ad10c2f839421940e465682b0fd5ccb1441dbbf5496a4a7a4398428e1bd311c08a80b0afa2ef210efc2b2373efa1950329699eed2639b11830a9eb318396e99172eeb9f9a8131b63c4ed855a0e582093021398a71f21f6bbb2b82f1f7e525069f7520f79f1ff935c0ec64f853dd74db41726abcddad6ba685ab1a740c938f67f8227b7f7287e6728346c3c1d7f2b6c4a79c966eff7801c00ad70219c9e5660cd315fab4753e6e018f4671cee944aa77e1931bfb8f08d", 0xcb}], 0x2, 0x65, 0x0)
pidfd_getfd(r1, 0xffffffffffffffff, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:06:03 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xbc, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}]}, @NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="87f8fc5ef3631347a411a8675099a832"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8000}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1cd251977079d6dccfac32632b24d26811a06418d34f80543cee5d0b156366f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "654ffc83686968f5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="15d52b40a9a813d535deaa3f6ad80666"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="893c6ca3162d74087c1ee1e30a2ada3d04b6e56a691d04bcbd769cee6a78dd78"}]}]}, 0xbc}}, 0x5)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x6)

[  179.621544] Bluetooth: hci6: command 0x0406 tx timeout
[  179.621580] Bluetooth: hci4: command 0x0406 tx timeout
[  179.622753] Bluetooth: hci0: command 0x0406 tx timeout
[  179.622962] Bluetooth: hci5: command 0x0406 tx timeout
[  179.623600] Bluetooth: hci3: command 0x0406 tx timeout
[  179.624224] Bluetooth: hci7: command 0x0406 tx timeout
[  179.624870] Bluetooth: hci2: command 0x0406 tx timeout
[  183.717342] Bluetooth: hci1: command 0x0406 tx timeout
16:06:17 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:06:17 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4005)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000008c0))
r4 = pidfd_getfd(r3, r3, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x10, 0x3f2, 0x400, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x41)
process_madvise(r1, &(0x7f0000001d80)=[{&(0x7f0000000a00)="0af0cc6a0221cd6f578d989f67ab5631c594cce04b56982b8cf7814f8c524547ba58e23afca1cb495e220e0546d57cd86a7d78432f679918b39c04579fe5700115bdc0809466eb324f4cfab3", 0x4c}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="d7888cc0ba2dd46ab3ff00704986935fe83e76585eec3206c78801", 0x1b}, {&(0x7f0000001ac0)="0ce1a9f1748b832ab690e6f396773a987a1d59a391ff22ae826ce58f633ad95ba5eb415e71b4589c756ef9812091461fbf60a7b65f7969dc41e1084d8de24ffb636553eb6f8163589ce09eacc439fa603ba558bf1deeb0f819a46a960faf20fcee3477e2b884e30171d1520b4ed3d64e0b336259f9cd3479fe83710e4ae887cbc3fb7f21462b00da6999627667a9dc50e2c7187c7bfbb35d2ce7cf2063f5c0245152bfb8d601ad97ea12d06aee2780809317ca60d9fe182781fc6b43c0af315e01d6cbae8b5bdf2fd918fec764cf2a09564df4e4ad9fd4bb0e37a506f696abe21969adfdf286", 0xe6}, {&(0x7f0000001bc0)="d8c04ec0d65e8299bd53c33d01a68727a3f1efe42b46b10ff563da5845575ac3f0d24440079a7b4b9816b1406bc3dc4513d3c877a98a506718cbdd472ed110415a895909b36055754406e23fa272c1c34da65737e75c3c37315aa04a8c068a09967fa7b4e6d1963c25dacc1b63247d127c1a64fd0cad5af619fbf29ada5d1e42ed63ef39ba744e54b3d2f7cfb1e1a4bfa2e3484cc84d6cfbe13d9dd35031abcfaf3e174e5bf10e6ec142a42d3bc0df97575e486596", 0xb5}, {&(0x7f0000001c80)="a3f5ffa6f1967e8b14b59846427c8fcb12feea5e407823178b943bd910b36bdedd9ff148060e55e119c4e0c2f30e20e6aaec6ac6e0f27bbe3f4e78a892714d570223c71190ed7f900526400a8de0b76394fae9667e5fff988488de5b4b31632d2b4f0144029c3c2e853817941d957a733d52b8a5cb12d5f6a3dc15092f8700269c5abad0fa8ce17b477d87a1d3a892e20d60f1", 0x93}, {&(0x7f0000001d40)="49f33c2e54ad89e9e2704ccc93a2f9d0462b774ca6c8816eef9b1f6fd0f8a8783990d01f80230dcdde77e5164e579e8ddb0ef970b0db38a428", 0x39}], 0x7, 0x64, 0x0)

16:06:17 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000600)={0x1000, ""/4096})
rt_sigsuspend(&(0x7f0000001640)={[0x401]}, 0x8)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9adc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
r4 = socket(0x22, 0xa, 0x400)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0xc, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x200040c1)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:06:17 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x190, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xe0, r4, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdbe7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xfffffe00}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x43a6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x17}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1e8}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5e7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x80000000]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x160}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x23}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x1ff, 0x2cfc]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd8f2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:06:17 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
process_madvise(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="0a259cd191ce1d3e6669d5fcc32d0cb7a668baa8e0063506bcf1419f5bbf9c34c5ec9708e37e5a4c83d8fdb2df6056219d60362a8f8835ae0b0a", 0x3a}, {&(0x7f0000000300)="636b6e51a4cbb4cda78e72f6b7b29af58518ff7e89ad10c2f839421940e465682b0fd5ccb1441dbbf5496a4a7a4398428e1bd311c08a80b0afa2ef210efc2b2373efa1950329699eed2639b11830a9eb318396e99172eeb9f9a8131b63c4ed855a0e582093021398a71f21f6bbb2b82f1f7e525069f7520f79f1ff935c0ec64f853dd74db41726abcddad6ba685ab1a740c938f67f8227b7f7287e6728346c3c1d7f2b6c4a79c966eff7801c00ad70219c9e5660cd315fab4753e6e018f4671cee944aa77e1931bfb8f08d", 0xcb}], 0x2, 0x65, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:06:17 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6)

16:06:17 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x492}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004000}, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80484}, 0x20000011)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:06:17 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
r3 = socket(0x27, 0x800, 0x7)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x28, r4, 0x604, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffc1, 0x73}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24044040}, 0x10048000)
socket(0xf, 0x6, 0x9)

[  185.006745] audit: type=1326 audit(1664985977.805:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4337 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:06:17 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
r1 = pidfd_getfd(r0, r0, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000180), 0x5, &(0x7f0000000200))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:06:17 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:06:17 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
pidfd_getfd(r0, r0, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:06:30 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4005)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000008c0))
r4 = pidfd_getfd(r3, r3, 0x0)
sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x10, 0x3f2, 0x400, 0x70bd2d, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x41)

16:06:30 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000600)={0x1000, ""/4096})
rt_sigsuspend(&(0x7f0000001640)={[0x401]}, 0x8)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9adc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
socket(0x22, 0xa, 0x400)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:06:30 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x45f)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:06:30 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6)

16:06:30 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000140)=0x6, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:06:30 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x190, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0xc, 0x0, 0x5}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x1)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:06:30 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
socket(0x27, 0x800, 0x7)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan1\x00'})
socket(0xf, 0x6, 0x9)

16:06:30 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x492}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004000}, 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000002b00)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x30, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80484}, 0x20000011)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:06:30 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

[  197.871736] audit: type=1326 audit(1664985990.668:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4388 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:06:30 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:06:30 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x9, 0x2d, 0x3, 0x0, 0x100, 0x14010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x32080, 0x20, 0x1fd8, 0x6, 0x87, 0x33b7, 0x7, 0x0, 0x6, 0x0, 0x39}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:06:30 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x190, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:06:30 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000002a00)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002900)={0x84, 0x1, 0x8, 0x201, 0x0, 0x0, {0xc}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x492}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9100}]}, 0x84}, 0x1, 0x0, 0x0, 0x22004000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:06:30 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6)

16:06:30 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:06:31 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xac, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa01}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf28}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0xac}}, 0x10001)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6)

[  210.166630] audit: type=1326 audit(1664986002.964:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4434 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:06:42 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000002880)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x5c, 0x464, 0x20, 0x70bd2c, 0x25dfdbfc, "6c006cd3dcaf4e7b30e03407ece0f8fb735a40b826f1e6e98aaf6e23786641ae7b29ea6360b4b05e20fdb8dea24625a94fa3f5f1eac0e9cbdc8fa65e2d6d118a8dd2a3c2816a589366", ["", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008010)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:06:42 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x190, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x15c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x190}, 0x1, 0x0, 0x0, 0x4044880}, 0x4000000)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:06:42 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:06:42 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:06:42 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4005)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000008c0))
pidfd_getfd(r3, r3, 0x0)

16:06:42 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000600)={0x1000, ""/4096})
rt_sigsuspend(&(0x7f0000001640)={[0x401]}, 0x8)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9adc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:06:42 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
read$char_usb(r0, &(0x7f0000000040)=""/196, 0xc4)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6)

16:06:42 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
socket(0x27, 0x800, 0x7)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), 0xffffffffffffffff)
socket(0xf, 0x6, 0x9)

16:06:42 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4d00000000)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:06:43 executing program 5:
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2)
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:06:43 executing program 7:
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x6, 0x1000, 0x8000, 0xf0000000, 0x2, 0x34, 0x6}, 0x1c)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:06:43 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
syz_open_dev$char_usb(0xc, 0xb4, 0x1ff)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6)

16:06:43 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x3)
read$char_usb(r2, &(0x7f0000001780)=""/4096, 0x1000)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:06:43 executing program 5:
perf_event_open(&(0x7f0000001540)={0x5, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:06:43 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:06:54 executing program 7:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x202, 0x0)

16:06:54 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000600)={0x1000, ""/4096})
rt_sigsuspend(&(0x7f0000001640)={[0x401]}, 0x8)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:06:54 executing program 3:
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@target={'target ', {'PCI:', '5', ':', '16', ':', '13', '.', '0'}}, 0x15)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6)

16:06:54 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4005)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)
ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f00000008c0))

16:06:54 executing program 5:
perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

[  221.774664] audit: type=1326 audit(1664986014.573:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4483 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:06:54 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
syz_open_dev$char_usb(0xc, 0xb4, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:06:54 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x120, 0x2, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_NAT={0x64, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:06:54 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
socket(0x27, 0x800, 0x7)
socket(0xf, 0x6, 0x9)

16:06:54 executing program 7:
openat$bsg(0xffffffffffffff9c, 0x0, 0x202, 0x0)

16:06:54 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001700)={&(0x7f00000012c0)={0x428, 0x3f3, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x1, 0x6, [0x1, 0x200, 0x0, 0x3, 0x7, 0x400, 0xffffffff, 0x4, 0x4, 0x400, 0x2, 0x6, 0x8, 0x6, 0xc193, 0x200, 0x3, 0x7, 0x3, 0x7ff, 0xfff, 0x3, 0x29, 0xffd, 0x70000, 0x67c278fb, 0x6, 0x2, 0x4, 0x7ff, 0xffff, 0x100, 0x4, 0x1ff, 0x43, 0x8, 0x1000, 0x9, 0x8aa5, 0x80000000, 0x8, 0x5, 0x6, 0x2, 0x1, 0x1259, 0x4, 0xffff, 0x1, 0x200, 0x5, 0x8, 0xb2, 0xa38, 0xff, 0x5, 0xff, 0x9, 0x9, 0x3, 0x80000000, 0x3, 0x7ff, 0x80000000], [0x8, 0x1ff, 0x4, 0x2, 0xc433, 0x7fffffff, 0x5, 0x8, 0x1ff, 0xa9, 0x543, 0x9, 0x2, 0x5, 0x1, 0x3f, 0x1e0d, 0x0, 0x800, 0x200, 0xffffffff, 0x80000001, 0x80, 0xfffffff8, 0x20, 0xffff7f35, 0x1, 0xffff8001, 0xbd, 0x7d6, 0x8, 0x6, 0x1ff, 0x7, 0xfffffff7, 0x1de, 0x6175, 0x8, 0x51, 0x8, 0x3ff, 0x8, 0xfc, 0x2, 0x4f, 0x6, 0x1, 0x800, 0xfff, 0x100000, 0x8, 0x4, 0x10000, 0x7, 0x6, 0x83f6, 0x7, 0x8, 0xff, 0xff, 0x7, 0x7, 0x6, 0x3f], [0x6, 0x7fff, 0x7ff, 0x3f, 0xff, 0xffffff00, 0x80000001, 0x8d, 0xd422, 0x2, 0x654, 0x4, 0x6, 0x10000, 0x4c, 0x9, 0x80000000, 0x8, 0x2b7, 0x4, 0x7, 0x1, 0x4, 0x1, 0x7, 0xf0000000, 0x11b05abd, 0x74d, 0x74, 0x7f, 0x0, 0x7f, 0x79d5dbe7, 0xff, 0x5, 0x10001, 0x1, 0x8, 0xff80, 0x11, 0x6, 0x2, 0x800, 0x1, 0x81, 0x0, 0x5c9, 0x81, 0xfffffffb, 0x2, 0x5, 0x3, 0x200, 0x10, 0x6, 0x10000, 0x7, 0x4, 0x5, 0x1, 0x1, 0x101, 0xfffff001, 0x4], [0x81, 0x200, 0x80000001, 0x4, 0x80000001, 0x3, 0x80000001, 0x8000, 0x7f, 0xfffffe01, 0x1, 0x3, 0x4, 0xde5, 0x26ec, 0x3ff, 0x8001, 0x8, 0xe28, 0x7, 0x2, 0x2, 0x12, 0xffffff49, 0x6, 0x8, 0x20da1f0e, 0x93, 0x0, 0x9, 0x8, 0x7, 0x80, 0x7, 0x5ac1, 0x83, 0xffffffff, 0x400, 0x2, 0x9, 0x76b6, 0x3, 0x10000, 0x7f, 0xffff00, 0x5, 0xffffff00, 0x2a4, 0xaf, 0x3f, 0x3ff, 0x1bb1, 0x101, 0x86, 0x1, 0x8001, 0x1, 0x8, 0x7, 0x81, 0xfe1, 0x2, 0x7, 0x8], 0x5, ['syz0\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:06:54 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6)

16:06:54 executing program 7:
openat$bsg(0xffffffffffffff9c, 0x0, 0x202, 0x0)

16:06:54 executing program 5:
perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:06:54 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:06:54 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:07:07 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000600)={0x1000, ""/4096})
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:07:07 executing program 5:
perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:07:07 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4005)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

16:07:07 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:07 executing program 7:
openat$bsg(0xffffffffffffff9c, 0x0, 0x202, 0x0)

[  234.306988] audit: type=1326 audit(1664986027.105:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4531 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:07:07 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6)

16:07:07 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
socket(0xf, 0x6, 0x9)

16:07:07 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x80}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:07:07 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6)

16:07:07 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:07 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x109080, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6)

16:07:07 executing program 7:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)

16:07:07 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
openat$bsg(0xffffffffffffff9c, &(0x7f00000005c0), 0x800, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:07:07 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x6, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:07:07 executing program 7:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)

16:07:07 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
socket(0xf, 0x6, 0x9)

16:07:07 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:07 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6)

16:07:18 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x8, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:07:18 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
socket(0xf, 0x6, 0x9)

16:07:18 executing program 7:
openat$bsg(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)

16:07:18 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:07:18 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4005)

16:07:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000040}, 0x8000)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:07:18 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6)

16:07:18 executing program 2:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:18 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6)

[  245.684649] audit: type=1326 audit(1664986038.482:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4600 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:07:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00'})
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:07:18 executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:18 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x8a, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:07:18 executing program 3:
openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6)

16:07:18 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:07:18 executing program 7:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:18 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
socket(0xf, 0x6, 0x9)

16:07:18 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
socket(0xf, 0x6, 0x9)

16:07:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x3, 0x0, {0x7, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x80}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x1, 0x2, 0x0, {0x1, 0x81, 0x0, 0x19d, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x300, 0x17, 0xf0}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x40, {0x2, 0x7, 0x9, 0x1ff}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4008001}, 0x80)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:07:18 executing program 3:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0)

16:07:18 executing program 7:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:30 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x41, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:07:30 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
socket(0xf, 0x6, 0x9)

16:07:30 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
socket(0xf, 0x6, 0x9)

16:07:30 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:07:30 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000002c0)={0x4, 0x80, 0x69, 0x8, 0x9, 0x6, 0x0, 0x7, 0x102, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000280)}, 0xc00, 0x1f, 0x3, 0x0, 0x42c, 0x3, 0x4, 0x0, 0x9, 0x0, 0x80000000})
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:07:30 executing program 3:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:30 executing program 7:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:30 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x3, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:07:30 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

[  257.816581] audit: type=1326 audit(1664986050.614:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4667 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:07:30 executing program 3:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:30 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40018, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:07:30 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:07:30 executing program 7:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

16:07:30 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='}*\x00')
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:07:30 executing program 7:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

16:07:30 executing program 3:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000001240)={&(0x7f0000001040), 0xc, &(0x7f0000001200)={&(0x7f0000001080)={0x14c, 0xa, 0x6, 0xc05, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:42 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))

16:07:42 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:07:42 executing program 3:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001000))
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:42 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

[  270.100428] audit: type=1326 audit(1664986062.898:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4703 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:07:42 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)
socket(0xf, 0x6, 0x9)

16:07:42 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0xf, 0x6, 0x9)

16:07:42 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=""/148, &(0x7f00000001c0)=0x94)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:07:42 executing program 7:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)

16:07:55 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))

16:07:55 executing program 7:
prctl$PR_GET_NAME(0x10, 0x0)

16:07:55 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
socket(0xf, 0x6, 0x9)

16:07:55 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4a1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4e}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40004)

16:07:55 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x80, 0x2, 0x8, 0x1f, 0x9e, 0x0, 0x7f, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x738, 0x2}, 0x0, 0x9, 0x40, 0x8, 0x200, 0x7fff, 0x20, 0x0, 0xfffffe0a, 0x0, 0x6})
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:07:55 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:07:55 executing program 3:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:55 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

[  282.764243] audit: type=1326 audit(1664986075.562:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4736 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:07:55 executing program 7:
prctl$PR_GET_NAME(0x10, 0x0)

16:07:55 executing program 3:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:55 executing program 7:
prctl$PR_GET_NAME(0x10, 0x0)

16:07:55 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:07:55 executing program 0:
r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xd, 0x1010, r0, 0x69272633)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:07:55 executing program 3:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:07:55 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:07:55 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:08:08 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

[  295.672365] audit: type=1326 audit(1664986088.470:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4785 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:08:08 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:08:08 executing program 7:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:08:08 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket(0xf, 0x6, 0x9)

16:08:08 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)

16:08:08 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:08:08 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000640))

16:08:08 executing program 0:
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7e, 0xd0, 0x6, 0x80, 0x0, 0x4ec6, 0x10400, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1, 0x1, @perf_config_ext={0xffffffffffff9ab2, 0x4}, 0x10822, 0x100000, 0x80000000, 0x6, 0x0, 0x56e, 0x968, 0x0, 0x2, 0x0, 0x8f}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8)
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:08:08 executing program 7:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:08:08 executing program 0:
openat$random(0xffffffffffffff9c, &(0x7f00000019c0), 0x400400, 0x0)

16:08:08 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:08:08 executing program 3:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:08:08 executing program 7:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:08:08 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:08:08 executing program 0:
openat$random(0xffffffffffffff9c, 0x0, 0x400400, 0x0)

16:08:08 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:08:08 executing program 3:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
socket$nl_netfilter(0x10, 0x3, 0xc)

16:08:08 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:08:21 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
socket(0xf, 0x6, 0x9)

16:08:21 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:08:21 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:08:21 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:08:21 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:08:21 executing program 7:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)

16:08:21 executing program 0:
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)

16:08:21 executing program 3:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
socket$nl_netfilter(0x10, 0x3, 0xc)

[  308.692089] audit: type=1326 audit(1664986101.490:26): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4847 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:08:21 executing program 7:
prctl$PR_GET_NAME(0x10, 0x0)

16:08:21 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:08:21 executing program 0:
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)

16:08:21 executing program 3:
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)

16:08:21 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
socket(0xf, 0x6, 0x9)

16:08:21 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:08:21 executing program 7:
prctl$PR_GET_NAME(0x10, 0x0)

16:08:21 executing program 0:
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)

16:08:21 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:08:21 executing program 3:
prctl$PR_GET_NAME(0x10, 0x0)

16:08:34 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:08:34 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:08:34 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
socket(0xf, 0x6, 0x9)

16:08:34 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x25c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b47b2daead58df80c98439e4e114ec91"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6bbe20e63321a106"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9ec2f30010437652c64573a49f7469f4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c877ac70fbe11549cb1b6b6b0c661fdd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="95827347d4f672677f0e559ee219d92c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x29d6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x371}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x72}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d42bb020a19134b2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="cb6fca280262010d34a90a7cb029ba72"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="87c026cd98160e0718b4503cf6395c19b0dc491cd1938e0e3a29de11581d3cd7"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa37}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "52a3558a52a0dd85"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "97a0ffa9e6d5a13f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="660debda2d8b56b7bd69c8fbf8e79695a1a2e5f664bf0a74"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6f868c65a10ba1cb9ec3280e5301c3bb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="47fde91955a2177a8c6e6320b96df9d0"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="d31371b22e0a24dec9dbdd439c77803bfa978ede1958f57f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="fce9d930f95608cdb96d01cf56673b766b1707cf20ccf059e0514a1733e59629"}]}, @NL80211_ATTR_REKEY_DATA={0x8c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="c35a5d6f0dcd7b5e434b1fc157735ab12bf276b3994f578ed7e29240d244ba14"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="eb77de43647cf8eb64883d81a2ffc042f246588ba2abb5b5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9132f7657e6966c36655541ba429068e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fa189c38f9f813be"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="eb055f95d208353536926c9715cb858e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="37f3c82dce3047c283dbb4b5fe5efb7c"}]}, @NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "36cefa6a8ea9fa0d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "109176c85c37bb30"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="335972e3e57c1ffded979e218fabbbc4"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fcddd04465ddfdb1"}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:08:34 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

[  322.229236] audit: type=1326 audit(1664986115.027:27): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4894 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:08:35 executing program 7:
prctl$PR_GET_NAME(0x10, 0x0)

16:08:35 executing program 0:
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)

16:08:35 executing program 3:
prctl$PR_GET_NAME(0x10, 0x0)

16:08:35 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:08:35 executing program 3:
prctl$PR_GET_NAME(0x10, 0x0)

16:08:35 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:08:35 executing program 0:
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)

16:08:35 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:08:35 executing program 4:
socket(0xf, 0x6, 0x9)

16:08:35 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:08:35 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
socket(0xf, 0x6, 0x9)

16:08:47 executing program 0:
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)

16:08:47 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:08:47 executing program 4:
socket(0x0, 0x6, 0x9)

16:08:47 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:08:47 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:08:47 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:08:47 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:08:47 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
socket(0xf, 0x6, 0x9)

16:08:47 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

[  334.437129] audit: type=1326 audit(1664986127.235:28): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4957 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
[  334.464033] audit: type=1326 audit(1664986127.262:29): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4960 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57526fbb19 code=0x0
16:08:47 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:08:47 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
socket(0xf, 0x6, 0x9)

16:08:47 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

[  348.792318] audit: type=1326 audit(1664986141.590:30): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4985 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:09:01 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:01 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:09:01 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:09:01 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:01 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)

16:09:01 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:09:01 executing program 4:
socket(0x0, 0x6, 0x9)

16:09:01 executing program 3:
socket(0xf, 0x6, 0x9)

[  348.849154] audit: type=1326 audit(1664986141.643:31): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4998 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57526fbb19 code=0x0
16:09:01 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)

16:09:01 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:01 executing program 3:
socket(0xf, 0x6, 0x9)

16:09:01 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)

16:09:01 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:01 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)

16:09:01 executing program 4:
socket(0x0, 0x6, 0x9)

16:09:01 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:09:14 executing program 3:
socket(0xf, 0x6, 0x9)

16:09:14 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:09:14 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:09:14 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:14 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:14 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @broadcast}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)

16:09:14 executing program 4:
socket(0xf, 0x0, 0x9)

16:09:14 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:09:14 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

[  361.873440] audit: type=1326 audit(1664986154.671:32): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5050 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57526fbb19 code=0x0
[  361.892096] audit: type=1326 audit(1664986154.690:33): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5042 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:09:14 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)

16:09:14 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)

16:09:14 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:14 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4810)
socket(0xf, 0x6, 0x9)

16:09:14 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)

16:09:14 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:09:14 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:14 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:27 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r2, 0x102, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008085}, 0x4)

16:09:27 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:27 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:09:27 executing program 4:
socket(0xf, 0x0, 0x0)

16:09:27 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0)
socket(0xf, 0x6, 0x9)

16:09:27 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:27 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)

[  374.276414] audit: type=1326 audit(1664986167.072:34): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5094 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:09:27 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
accept4$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80400)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:09:27 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)

[  374.334844] audit: type=1326 audit(1664986167.133:35): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5107 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57526fbb19 code=0x0
16:09:27 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)

16:09:27 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0)
socket(0xf, 0x6, 0x9)

16:09:27 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:27 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:27 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff)

16:09:27 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:09:27 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

[  386.438897] audit: type=1326 audit(1664986179.237:36): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5148 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:09:39 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:09:39 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:39 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0)
socket(0xf, 0x6, 0x9)

16:09:39 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:39 executing program 7:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff)

16:09:39 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:39 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)

16:09:39 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:09:39 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

[  386.486322] audit: type=1326 audit(1664986179.284:37): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5158 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57526fbb19 code=0x0
16:09:39 executing program 7:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff)

16:09:39 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:39 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x13, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040041}, 0x80)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:09:39 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:39 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001500), 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:39 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:39 executing program 7:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

16:09:39 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4810)
socket(0x0, 0x6, 0x9)

16:09:39 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:39 executing program 7:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

16:09:39 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:39 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4200, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:39 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:09:51 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:51 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:09:51 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:51 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xaa39, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:09:51 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)

16:09:51 executing program 7:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

16:09:51 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4810)
socket(0x0, 0x6, 0x9)

16:09:51 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

[  398.307136] audit: type=1326 audit(1664986191.105:38): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5227 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:09:51 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

[  398.324775] audit: type=1326 audit(1664986191.123:39): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5226 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57526fbb19 code=0x0
16:09:51 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:09:51 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4810)
socket(0x0, 0x6, 0x9)

16:09:51 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:10:02 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:10:02 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
socket(0x29, 0x1, 0x401)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:10:02 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:10:02 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:10:02 executing program 7:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)

16:10:02 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4810)
socket(0xf, 0x0, 0x9)

16:10:02 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_audit(0x10, 0x3, 0x9)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:10:02 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)

16:10:02 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

[  409.920958] audit: type=1326 audit(1664986202.719:40): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5265 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57526fbb19 code=0x0
[  409.928430] audit: type=1326 audit(1664986202.719:41): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5266 comm="syz-executor.7" exe="/syz-executor.7" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffab61ccb19 code=0x0
[  409.948635] audit: type=1326 audit(1664986202.747:42): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5268 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
16:10:02 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:10:02 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:10:02 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:10:02 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:10:03 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4810)
socket(0xf, 0x0, 0x9)

16:10:03 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:10:03 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:10:16 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)

16:10:16 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:10:16 executing program 1:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f0000000680), 0x119040, 0x0)

16:10:16 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:10:16 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:10:16 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:10:16 executing program 3:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x4810)
socket(0xf, 0x0, 0x9)

16:10:16 executing program 7:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r0 = socket(0x29, 0x1, 0x401)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x8c, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7fffffff}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa49b}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x13, 0xa, 0x101, 0x0, 0x0, {0xd5ec7b88366d81b9, 0x0, 0x7}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x1)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x40)
openat$bsg(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0)

[  423.546437] audit: type=1326 audit(1664986216.344:44): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5324 comm="syz-executor.7" exe="/syz-executor.7" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffab61ccb19 code=0x0
[  423.551226] audit: type=1326 audit(1664986216.345:45): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5326 comm="syz-executor.1" exe="/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ddf79fb19 code=0x0
[  423.554975] audit: type=1326 audit(1664986216.342:43): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5327 comm="syz-executor.0" exe="/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57526fbb19 code=0x0
16:10:16 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:10:16 executing program 6:
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x2, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2e}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x38000000}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9d90}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x5}, 0x1)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

[  423.729766] ------------[ cut here ]------------
[  423.730651] WARNING: CPU: 0 PID: 5338 at kernel/events/core.c:2233 event_filter_match+0x422/0x660
[  423.731900] Modules linked in:
[  423.732352] CPU: 0 PID: 5338 Comm: modprobe Not tainted 6.0.0-next-20221005 #1
[  423.733333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  423.734431] RIP: 0010:event_filter_match+0x422/0x660
[  423.735128] Code: 00 00 00 e9 7c fc ff ff e8 7b 33 f1 ff 65 8b 2d 20 8d ad 7e 31 ff 89 ee e8 1b 30 f1 ff 85 ed 0f 84 ef 00 00 00 e8 5e 33 f1 ff <0f> 0b eb 9f e8 25 9f 23 00 e9 17 fc ff ff e8 4b 33 f1 ff 48 8d 7b
[  423.737751] RSP: 0018:ffff88806ce09c70 EFLAGS: 00010046
[  423.739427] RAX: 0000000080010002 RBX: ffff888036788000 RCX: 0000000000000000
[  423.741845] RDX: ffff888008793580 RSI: ffffffff8154e8b2 RDI: 0000000000000005
[  423.743602] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001
[  423.744565] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff888036788220
[  423.745522] R13: 0000000000000000 R14: ffff8880367880a8 R15: ffff888036788220
[  423.746483] FS:  0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  423.747565] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  423.748343] CR2: 00007f3ebb123310 CR3: 0000000029cc4000 CR4: 0000000000350ef0
[  423.749286] Call Trace:
[  423.749635]  <IRQ>
[  423.749983]  merge_sched_in+0x107/0x1110
[  423.750579]  visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
[  423.751399]  ? merge_sched_in+0x1110/0x1110
[  423.752003]  ? lock_is_held_type+0xd7/0x130
[  423.752611]  ctx_sched_in+0x2e6/0x770
[  423.753153]  ? lock_acquire+0x1b2/0x530
[  423.753709]  ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0
[  423.754543]  ? lock_is_held_type+0xd7/0x130
[  423.755172]  perf_event_sched_in+0x75/0x80
[  423.755770]  ctx_resched+0x1ce/0x390
[  423.756319]  __perf_install_in_context+0x285/0x9c0
[  423.756998]  ? ctx_resched+0x390/0x390
[  423.757543]  remote_function+0x125/0x1b0
[  423.758131]  __flush_smp_call_function_queue+0x1df/0x5a0
[  423.758868]  ? perf_duration_warn+0x40/0x40
[  423.759471]  __sysvec_call_function_single+0x92/0x3a0
[  423.760159]  sysvec_call_function_single+0x89/0xc0
[  423.760825]  </IRQ>
[  423.761146]  <TASK>
[  423.761464]  asm_sysvec_call_function_single+0x16/0x20
[  423.762172] RIP: 0010:___slab_alloc+0x2ba/0x1080
[  423.762806] Code: 0a 00 00 49 c7 47 28 00 00 00 00 48 c7 c6 43 0b 78 81 4c 89 ff e8 c6 20 b2 ff 4d 85 ed 74 06 e8 ec e8 d4 ff fb 48 8b 44 24 38 <e9> 97 fd ff ff 48 8b 45 00 48 8d 78 20 49 89 ff e8 01 78 ad 02 be
[  423.765131] RSP: 0018:ffff8880384477b8 EFLAGS: 00000206
[  423.765859] RAX: ffffea0000268f80 RBX: ffff88806ce3c480 RCX: ffffffff81298e8f
[  423.766807] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  423.767760] RBP: ffff888007c4f780 R08: 0000000000000001 R09: ffffffff86cd57ef
[  423.768701] R10: fffffbfff0d9aafd R11: 0000000000000001 R12: 00000000ffffffff
[  423.769629] R13: 0000000000000200 R14: ffff888008793580 R15: ffff88806ce3c4a0
[  423.770616]  ? mark_lock.part.0+0xef/0x2f70
[  423.771210]  ? ___slab_alloc+0x2b4/0x1080
[  423.771770]  ? __create_object+0x3d/0xc10
[  423.772322]  ? lock_release+0x3b2/0x750
[  423.772894]  ? __create_object+0x3d/0xc10
[  423.773462]  __slab_alloc.constprop.0+0x4d/0x90
[  423.774129]  ? __create_object+0x3d/0xc10
[  423.774688]  kmem_cache_alloc+0x2ed/0x3e0
[  423.775260]  __create_object+0x3d/0xc10
[  423.775808]  ? kasan_set_track+0x21/0x30
[  423.776362]  kmem_cache_alloc_bulk+0x414/0x7d0
[  423.776973]  ? trace_kmem_cache_alloc+0x2d/0xe0
[  423.777590]  ? kmem_cache_alloc+0x1f9/0x3e0
[  423.778195]  mas_alloc_nodes+0x2ff/0x800
[  423.778786]  mas_preallocate+0x1bb/0x360
[  423.779334]  do_mas_align_munmap.constprop.0+0x111/0x1000
[  423.780058]  ? mtree_range_walk+0x643/0x8e0
[  423.780640]  ? __split_vma+0x5d0/0x5d0
[  423.781171]  ? mas_walk+0x48a/0x670
[  423.781664]  ? mas_find+0x209/0xdd0
[  423.782175]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  423.782877]  do_mas_munmap+0x1e8/0x2b0
[  423.783431]  mmap_region+0x21c/0x1a00
[  423.783969]  ? lock_release+0x750/0x750
[  423.784508]  ? do_munmap+0x100/0x100
[  423.785024]  ? security_mmap_addr+0x79/0xa0
[  423.785605]  ? get_unmapped_area+0x1e5/0x3e0
[  423.786233]  do_mmap+0x828/0xf40
[  423.786717]  vm_mmap_pgoff+0x1af/0x270
[  423.787247]  ? randomize_page+0xb0/0xb0
[  423.787799]  ksys_mmap_pgoff+0x79/0x4f0
[  423.788334]  do_syscall_64+0x3b/0x90
[  423.788837]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  423.789515] RIP: 0033:0x7f3ebb62ad82
[  423.790018] Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00
[  423.792358] RSP: 002b:00007ffc98a63528 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  423.793337] RAX: ffffffffffffffda RBX: 0000000000000032 RCX: 00007f3ebb62ad82
[  423.794292] RDX: 0000000000000003 RSI: 0000000000003470 RDI: 00007f3ebb124000
[  423.795219] RBP: 00007f3ebb124000 R08: 00000000ffffffff R09: 0000000000000000
[  423.796131] R10: 0000000000000032 R11: 0000000000000206 R12: 00007f3ebb609f20
[  423.797041] R13: 00007ffc98a63540 R14: 00007ffc98a635d0 R15: 00007ffc98a63930
[  423.798007]  </TASK>
[  423.798318] irq event stamp: 8732
[  423.798773] hardirqs last  enabled at (8731): [<ffffffff81780b64>] ___slab_alloc+0x2b4/0x1080
[  423.799874] hardirqs last disabled at (8732): [<ffffffff84256a1b>] sysvec_call_function_single+0xb/0xc0
[  423.801064] softirqs last  enabled at (8378): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  423.802164] softirqs last disabled at (8371): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  423.803271] ---[ end trace 0000000000000000 ]---
[  423.803951] ------------[ cut here ]------------
[  423.804548] WARNING: CPU: 0 PID: 5338 at kernel/events/core.c:2557 merge_sched_in+0xadb/0x1110
[  423.805682] Modules linked in:
[  423.806132] CPU: 0 PID: 5338 Comm: modprobe Tainted: G        W          6.0.0-next-20221005 #1
[  423.807244] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  423.808309] RIP: 0010:merge_sched_in+0xadb/0x1110
[  423.808947] Code: ff ff e8 08 0e ef ff 65 8b 05 ad 67 ab 7e 31 ff 89 c6 89 04 24 e8 a5 0a ef ff 8b 04 24 85 c0 0f 84 13 02 00 00 e8 e5 0d ef ff <0f> 0b e9 c4 fb ff ff e8 d9 0d ef ff 4c 89 e8 48 05 18 01 00 00 e9
[  423.811252] RSP: 0018:ffff88806ce09cb0 EFLAGS: 00010046
[  423.811960] RAX: 0000000080010002 RBX: ffff88806ce3f200 RCX: 0000000000000000
[  423.812885] RDX: ffff888008793580 RSI: ffffffff81570e2b RDI: 0000000000000005
[  423.813820] RBP: ffff888036788000 R08: 0000000000000005 R09: 0000000000000001
[  423.814737] R10: 0000000000000000 R11: ffffffff865b601b R12: ffff88806ce3f200
[  423.815654] R13: 0000000000000001 R14: ffff8880367880a8 R15: ffff888036788220
[  423.816583] FS:  0000000000000000(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  423.817608] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  423.818399] CR2: 00007f3ebb123310 CR3: 0000000029cc4000 CR4: 0000000000350ef0
[  423.819350] Call Trace:
[  423.819706]  <IRQ>
[  423.820028]  visit_groups_merge.constprop.0.isra.0+0x4fc/0xef0
[  423.820850]  ? merge_sched_in+0x1110/0x1110
[  423.821447]  ? lock_is_held_type+0xd7/0x130
[  423.822069]  ctx_sched_in+0x2e6/0x770
[  423.822604]  ? lock_acquire+0x1b2/0x530
[  423.823166]  ? visit_groups_merge.constprop.0.isra.0+0xef0/0xef0
[  423.823991]  ? lock_is_held_type+0xd7/0x130
[  423.824600]  perf_event_sched_in+0x75/0x80
[  423.825188]  ctx_resched+0x1ce/0x390
[  423.825744]  __perf_install_in_context+0x285/0x9c0
[  423.826419]  ? ctx_resched+0x390/0x390
[  423.826967]  remote_function+0x125/0x1b0
[  423.827531]  __flush_smp_call_function_queue+0x1df/0x5a0
[  423.828261]  ? perf_duration_warn+0x40/0x40
[  423.828863]  __sysvec_call_function_single+0x92/0x3a0
[  423.829574]  sysvec_call_function_single+0x89/0xc0
[  423.830253]  </IRQ>
[  423.830565]  <TASK>
[  423.830884]  asm_sysvec_call_function_single+0x16/0x20
[  423.831596] RIP: 0010:___slab_alloc+0x2ba/0x1080
[  423.832245] Code: 0a 00 00 49 c7 47 28 00 00 00 00 48 c7 c6 43 0b 78 81 4c 89 ff e8 c6 20 b2 ff 4d 85 ed 74 06 e8 ec e8 d4 ff fb 48 8b 44 24 38 <e9> 97 fd ff ff 48 8b 45 00 48 8d 78 20 49 89 ff e8 01 78 ad 02 be
[  423.834665] RSP: 0018:ffff8880384477b8 EFLAGS: 00000206
[  423.835383] RAX: ffffea0000268f80 RBX: ffff88806ce3c480 RCX: ffffffff81298e8f
[  423.836338] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  423.837291] RBP: ffff888007c4f780 R08: 0000000000000001 R09: ffffffff86cd57ef
[  423.838255] R10: fffffbfff0d9aafd R11: 0000000000000001 R12: 00000000ffffffff
[  423.839195] R13: 0000000000000200 R14: ffff888008793580 R15: ffff88806ce3c4a0
[  423.840149]  ? mark_lock.part.0+0xef/0x2f70
[  423.840747]  ? ___slab_alloc+0x2b4/0x1080
[  423.841314]  ? __create_object+0x3d/0xc10
[  423.841882]  ? lock_release+0x3b2/0x750
[  423.842450]  ? __create_object+0x3d/0xc10
[  423.843008]  __slab_alloc.constprop.0+0x4d/0x90
[  423.843651]  ? __create_object+0x3d/0xc10
[  423.844209]  kmem_cache_alloc+0x2ed/0x3e0
[  423.844785]  __create_object+0x3d/0xc10
[  423.845324]  ? kasan_set_track+0x21/0x30
[  423.845902]  kmem_cache_alloc_bulk+0x414/0x7d0
[  423.846522]  ? trace_kmem_cache_alloc+0x2d/0xe0
[  423.847153]  ? kmem_cache_alloc+0x1f9/0x3e0
[  423.847746]  mas_alloc_nodes+0x2ff/0x800
[  423.848324]  mas_preallocate+0x1bb/0x360
[  423.848878]  do_mas_align_munmap.constprop.0+0x111/0x1000
[  423.849623]  ? mtree_range_walk+0x643/0x8e0
[  423.850232]  ? __split_vma+0x5d0/0x5d0
[  423.850785]  ? mas_walk+0x48a/0x670
[  423.851286]  ? mas_find+0x209/0xdd0
[  423.851794]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  423.852508]  do_mas_munmap+0x1e8/0x2b0
[  423.853048]  mmap_region+0x21c/0x1a00
[  423.853593]  ? lock_release+0x750/0x750
[  423.854154]  ? do_munmap+0x100/0x100
[  423.854680]  ? security_mmap_addr+0x79/0xa0
[  423.855263]  ? get_unmapped_area+0x1e5/0x3e0
[  423.855874]  do_mmap+0x828/0xf40
[  423.856356]  vm_mmap_pgoff+0x1af/0x270
[  423.856892]  ? randomize_page+0xb0/0xb0
[  423.857455]  ksys_mmap_pgoff+0x79/0x4f0
[  423.858026]  do_syscall_64+0x3b/0x90
[  423.858538]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  423.859231] RIP: 0033:0x7f3ebb62ad82
[  423.859736] Code: eb aa 66 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 33 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 56 5b 5d c3 0f 1f 00 c7 05 ae 03 01 00 16 00
[  423.862113] RSP: 002b:00007ffc98a63528 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  423.863101] RAX: ffffffffffffffda RBX: 0000000000000032 RCX: 00007f3ebb62ad82
[  423.864031] RDX: 0000000000000003 RSI: 0000000000003470 RDI: 00007f3ebb124000
[  423.864951] RBP: 00007f3ebb124000 R08: 00000000ffffffff R09: 0000000000000000
[  423.865896] R10: 0000000000000032 R11: 0000000000000206 R12: 00007f3ebb609f20
[  423.866826] R13: 00007ffc98a63540 R14: 00007ffc98a635d0 R15: 00007ffc98a63930
[  423.867779]  </TASK>
[  423.868098] irq event stamp: 8732
[  423.868551] hardirqs last  enabled at (8731): [<ffffffff81780b64>] ___slab_alloc+0x2b4/0x1080
[  423.869660] hardirqs last disabled at (8732): [<ffffffff84256a1b>] sysvec_call_function_single+0xb/0xc0
[  423.870885] softirqs last  enabled at (8378): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  423.872003] softirqs last disabled at (8371): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  423.873120] ---[ end trace 0000000000000000 ]---
16:10:16 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:10:16 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa4, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7fff}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x2, 0x6, 0x0, {0xc76, 0x1111, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x5, 0xfe}}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xf, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x200}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8}}]}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x1, 0x0, 0x0, {0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x3, 0x1}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004}, 0x2004804c)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:10:16 executing program 6:
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40000)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8885}, 0x20044080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, 0xa, 0xa, 0x101, 0x0, 0x0, {0xc}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0xf26e4445296a6eed)

16:10:17 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

16:10:17 executing program 2:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
socket$nl_audit(0x10, 0x3, 0x9)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x40}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x4, 0x0, 0x1}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x81}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:10:17 executing program 4:
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x800}]}, 0xd4}, 0x1, 0x0, 0x0, 0x14}, 0x4810)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3e8, 0x100, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}}, 0x4000000)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1bc, 0x1, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x7ff}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, @CTA_EXPECT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x80000}, 0x1)
socket$nl_audit(0x10, 0x3, 0x9)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), 0xffffffffffffffff)

16:10:17 executing program 5:
perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x5, 0x0, 0x6, 0xca, 0x0, 0x1efe, 0x20000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000001600), 0x6}, 0x0, 0x6, 0x8000, 0x1, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x81}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)

[  424.471663] ------------[ cut here ]------------
[  424.472272] WARNING: CPU: 0 PID: 292 at kernel/events/core.c:2047 perf_group_detach+0x99e/0x12f0
[  424.473295] Modules linked in:
[  424.473686] CPU: 0 PID: 292 Comm: syz-executor.0 Tainted: G        W          6.0.0-next-20221005 #1
[  424.474728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  424.475657] RIP: 0010:perf_group_detach+0x99e/0x12f0
[  424.476249] Code: 85 d5 f8 ff ff e8 b2 4e ee ff 65 44 8b 25 56 a8 aa 7e 31 ff 44 89 e6 e8 50 4b ee ff 45 85 e4 0f 84 0a 05 00 00 e8 92 4e ee ff <0f> 0b e9 a9 f8 ff ff e8 86 4e ee ff 65 8b 1d 2b a8 aa 7e 31 ff 89
[  424.478468] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046
[  424.479279] RAX: 0000000080010001 RBX: ffff8880367885c8 RCX: 0000000000000000
[  424.480353] RDX: ffff88801b8b3580 RSI: ffffffff8157cd7e RDI: 0000000000000005
[  424.481457] RBP: ffff8880367885c8 R08: 0000000000000005 R09: 0000000000000001
[  424.482576] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  424.483656] R13: ffff888036788658 R14: ffff88806ce3f200 R15: ffff8880367885c8
[  424.484712] FS:  0000555556916400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  424.485954] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.486827] CR2: 00007ffcab555f98 CR3: 000000001d5ca000 CR4: 0000000000350ef0
[  424.487918] Call Trace:
[  424.488320]  <IRQ>
[  424.488666]  ? event_sched_out+0x71c/0xcd0
[  424.489351]  __perf_remove_from_context+0x71e/0xb20
[  424.490164]  event_function+0x297/0x3d0
[  424.490773]  ? perf_output_sample_regs+0x150/0x150
[  424.491542]  remote_function+0x125/0x1b0
[  424.492185]  __flush_smp_call_function_queue+0x1df/0x5a0
[  424.493020]  ? perf_duration_warn+0x40/0x40
[  424.493705]  __sysvec_call_function_single+0x92/0x3a0
[  424.494522]  sysvec_call_function_single+0x89/0xc0
[  424.495294]  </IRQ>
[  424.495662]  <TASK>
[  424.496026]  asm_sysvec_call_function_single+0x16/0x20
[  424.496849] RIP: 0010:preempt_count_add+0x7/0x150
[  424.497600] Code: fc ff ff 48 89 04 24 e8 67 28 58 00 48 8b 04 24 e9 15 fe ff ff e8 29 12 05 03 66 0f 1f 84 00 00 00 00 00 48 c7 c0 c0 26 06 87 <55> 48 ba 00 00 00 00 00 fc ff df 48 89 c1 53 83 e0 07 89 fb 48 c1
[  424.500328] RSP: 0018:ffff88802ba57d38 EFLAGS: 00000293
[  424.501140] RAX: ffffffff870626c0 RBX: ffff888019e05520 RCX: 0000000000000000
[  424.502251] RDX: ffff88801b8b3580 RSI: ffffffff8186c2f9 RDI: 0000000000000001
[  424.503331] RBP: ffff88802ba57df8 R08: 0000000000000006 R09: 0000000000000001
[  424.504406] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff1100574afad
[  424.505492] R13: ffff88801db3aa70 R14: 0000000000000001 R15: ffff888019e05520
[  424.506628]  ? __mnt_drop_write+0x9/0x80
[  424.507263]  __mnt_drop_write+0x13/0x80
[  424.507884]  touch_atime+0x42f/0x700
[  424.508479]  ? atime_needs_update+0x870/0x870
[  424.509179]  ? down_read_interruptible+0x490/0x490
[  424.509968]  iterate_dir+0x45e/0x700
[  424.510566]  __x64_sys_getdents64+0x13a/0x2c0
[  424.511271]  ? restore_fpregs_from_fpstate+0xbd/0x1c0
[  424.512092]  ? __ia32_sys_getdents+0x2c0/0x2c0
[  424.512808]  ? __x64_sys_getdents+0x2c0/0x2c0
[  424.513526]  ? syscall_enter_from_user_mode+0x1d/0x50
[  424.514339]  ? syscall_enter_from_user_mode+0x1d/0x50
[  424.515146]  do_syscall_64+0x3b/0x90
[  424.515745]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  424.516574] RIP: 0033:0x7f57527209c7
[  424.517148] Code: 00 00 0f 05 eb b9 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 81 fa ff ff ff 7f b8 ff ff ff 7f 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 bc ff ff ff f7 d8 64 89 02 48
[  424.519927] RSP: 002b:00007ffcab5561c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  424.521050] RAX: ffffffffffffffda RBX: 0000555556917c20 RCX: 00007f57527209c7
[  424.522142] RDX: 0000000000008000 RSI: 0000555556917c50 RDI: 0000000000000003
[  424.523213] RBP: 0000555556917c50 R08: 00000000000000e0 R09: 00007ffcab556090
[  424.524294] R10: 0000555556917cdb R11: 0000000000000293 R12: ffffffffffffffbc
[  424.525370] R13: 0000555556917c24 R14: 0000000000000016 R15: 00007ffcab5573c0
[  424.526344]  </TASK>
[  424.526637] irq event stamp: 527718
[  424.527099] hardirqs last  enabled at (527717): [<ffffffff8178932b>] kasan_quarantine_put+0x8b/0x1f0
[  424.528236] hardirqs last disabled at (527718): [<ffffffff84256a1b>] sysvec_call_function_single+0xb/0xc0
[  424.529395] softirqs last  enabled at (527372): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  424.530468] softirqs last disabled at (527367): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  424.531534] ---[ end trace 0000000000000000 ]---
[  424.532147] ------------[ cut here ]------------
[  424.532727] WARNING: CPU: 0 PID: 292 at kernel/events/core.c:2183 perf_group_detach+0x9c7/0x12f0
[  424.533810] Modules linked in:
[  424.534219] CPU: 0 PID: 292 Comm: syz-executor.0 Tainted: G        W          6.0.0-next-20221005 #1
[  424.535333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  424.536360] RIP: 0010:perf_group_detach+0x9c7/0x12f0
[  424.536983] Code: ff 0f 0b e9 a9 f8 ff ff e8 86 4e ee ff 65 8b 1d 2b a8 aa 7e 31 ff 89 de e8 26 4b ee ff 85 db 0f 84 86 04 00 00 e8 69 4e ee ff <0f> 0b e9 0e fa ff ff e8 5d 4e ee ff 48 8b 7c 24 20 48 81 c7 f8 00
[  424.539195] RSP: 0018:ffff88806ce09e60 EFLAGS: 00010046
[  424.539847] RAX: 0000000080010001 RBX: 0000000000000000 RCX: 0000000000000000
[  424.540708] RDX: ffff88801b8b3580 RSI: ffffffff8157cda7 RDI: 0000000000000005
[  424.541567] RBP: ffff8880367885c8 R08: 0000000000000005 R09: 0000000000000001
[  424.542441] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880367885c8
[  424.543297] R13: ffff8880367885c8 R14: ffff88806ce3f200 R15: ffff8880367885c8
[  424.544166] FS:  0000555556916400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  424.545141] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.545845] CR2: 00007ffcab555f98 CR3: 000000001d5ca000 CR4: 0000000000350ef0
[  424.546721] Call Trace:
[  424.547049]  <IRQ>
[  424.547330]  ? event_sched_out+0x71c/0xcd0
[  424.547869]  __perf_remove_from_context+0x71e/0xb20
[  424.548491]  event_function+0x297/0x3d0
[  424.548989]  ? perf_output_sample_regs+0x150/0x150
[  424.549607]  remote_function+0x125/0x1b0
[  424.550147]  __flush_smp_call_function_queue+0x1df/0x5a0
[  424.550820]  ? perf_duration_warn+0x40/0x40
[  424.551374]  __sysvec_call_function_single+0x92/0x3a0
[  424.552023]  sysvec_call_function_single+0x89/0xc0
[  424.552651]  </IRQ>
[  424.552938]  <TASK>
[  424.553227]  asm_sysvec_call_function_single+0x16/0x20
[  424.553879] RIP: 0010:preempt_count_add+0x7/0x150
[  424.554478] Code: fc ff ff 48 89 04 24 e8 67 28 58 00 48 8b 04 24 e9 15 fe ff ff e8 29 12 05 03 66 0f 1f 84 00 00 00 00 00 48 c7 c0 c0 26 06 87 <55> 48 ba 00 00 00 00 00 fc ff df 48 89 c1 53 83 e0 07 89 fb 48 c1
[  424.556644] RSP: 0018:ffff88802ba57d38 EFLAGS: 00000293
[  424.557292] RAX: ffffffff870626c0 RBX: ffff888019e05520 RCX: 0000000000000000
[  424.558185] RDX: ffff88801b8b3580 RSI: ffffffff8186c2f9 RDI: 0000000000000001
[  424.559036] RBP: ffff88802ba57df8 R08: 0000000000000006 R09: 0000000000000001
[  424.559889] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff1100574afad
[  424.560753] R13: ffff88801db3aa70 R14: 0000000000000001 R15: ffff888019e05520
[  424.561629]  ? __mnt_drop_write+0x9/0x80
[  424.562164]  __mnt_drop_write+0x13/0x80
[  424.562670]  touch_atime+0x42f/0x700
[  424.563142]  ? atime_needs_update+0x870/0x870
[  424.563699]  ? down_read_interruptible+0x490/0x490
[  424.564336]  iterate_dir+0x45e/0x700
[  424.564822]  __x64_sys_getdents64+0x13a/0x2c0
[  424.565377]  ? restore_fpregs_from_fpstate+0xbd/0x1c0
[  424.566025]  ? __ia32_sys_getdents+0x2c0/0x2c0
[  424.566604]  ? __x64_sys_getdents+0x2c0/0x2c0
[  424.567174]  ? syscall_enter_from_user_mode+0x1d/0x50
[  424.567822]  ? syscall_enter_from_user_mode+0x1d/0x50
[  424.568467]  do_syscall_64+0x3b/0x90
[  424.568933]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  424.569580] RIP: 0033:0x7f57527209c7
[  424.570067] Code: 00 00 0f 05 eb b9 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 81 fa ff ff ff 7f b8 ff ff ff 7f 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 bc ff ff ff f7 d8 64 89 02 48
[  424.572241] RSP: 002b:00007ffcab5561c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  424.573162] RAX: ffffffffffffffda RBX: 0000555556917c20 RCX: 00007f57527209c7
[  424.574048] RDX: 0000000000008000 RSI: 0000555556917c50 RDI: 0000000000000003
[  424.574920] RBP: 0000555556917c50 R08: 00000000000000e0 R09: 00007ffcab556090
[  424.575790] R10: 0000555556917cdb R11: 0000000000000293 R12: ffffffffffffffbc
[  424.576648] R13: 0000555556917c24 R14: 0000000000000016 R15: 00007ffcab5573c0
[  424.577549]  </TASK>
[  424.577865] irq event stamp: 527718
[  424.578307] hardirqs last  enabled at (527717): [<ffffffff8178932b>] kasan_quarantine_put+0x8b/0x1f0
[  424.579414] hardirqs last disabled at (527718): [<ffffffff84256a1b>] sysvec_call_function_single+0xb/0xc0
[  424.580555] softirqs last  enabled at (527372): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  424.581614] softirqs last disabled at (527367): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  424.582683] ---[ end trace 0000000000000000 ]---
[  424.583310] ------------[ cut here ]------------
[  424.583895] WARNING: CPU: 0 PID: 292 at kernel/events/core.c:655 perf_event_update_sibling_time+0xd5/0x4d0
[  424.585067] Modules linked in:
[  424.585477] CPU: 0 PID: 292 Comm: syz-executor.0 Tainted: G        W          6.0.0-next-20221005 #1
[  424.586599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  424.587594] RIP: 0010:perf_event_update_sibling_time+0xd5/0x4d0
[  424.588342] Code: 5e 41 5f e9 0d f0 f0 ff e8 08 f0 f0 ff 65 8b 1d ad 49 ad 7e 31 ff 89 de e8 a8 ec f0 ff 85 db 0f 84 d3 02 00 00 e8 eb ef f0 ff <0f> 0b eb 97 e8 e2 ef f0 ff 48 8d 7d 10 48 b8 00 00 00 00 00 fc ff
[  424.590540] RSP: 0018:ffff88806ce09e58 EFLAGS: 00010046
[  424.591195] RAX: 0000000080010001 RBX: 0000000000000000 RCX: 0000000000000000
[  424.592085] RDX: ffff88801b8b3580 RSI: ffffffff81552c25 RDI: 0000000000000005
[  424.592955] RBP: ffff8880367885c8 R08: 0000000000000005 R09: 0000000000000001
[  424.593847] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[  424.594712] R13: ffff888036788670 R14: 0000000000000001 R15: 0000000000000001
[  424.595579] FS:  0000555556916400(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000
[  424.596550] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.597271] CR2: 00007ffcab555f98 CR3: 000000001d5ca000 CR4: 0000000000350ef0
[  424.598151] Call Trace:
[  424.598478]  <IRQ>
[  424.598756]  ? lock_is_held_type+0xd7/0x130
[  424.599299]  ? perf_event_update_time+0x285/0x380
[  424.599909]  list_del_event+0x524/0x860
[  424.600416]  __perf_remove_from_context+0xd2/0xb20
[  424.601046]  event_function+0x297/0x3d0
[  424.601545]  ? perf_output_sample_regs+0x150/0x150
[  424.602169]  remote_function+0x125/0x1b0
[  424.602677]  __flush_smp_call_function_queue+0x1df/0x5a0
[  424.603336]  ? perf_duration_warn+0x40/0x40
[  424.603873]  __sysvec_call_function_single+0x92/0x3a0
[  424.604520]  sysvec_call_function_single+0x89/0xc0
[  424.605138]  </IRQ>
[  424.605420]  <TASK>
[  424.605708]  asm_sysvec_call_function_single+0x16/0x20
[  424.606379] RIP: 0010:preempt_count_add+0x7/0x150
[  424.606980] Code: fc ff ff 48 89 04 24 e8 67 28 58 00 48 8b 04 24 e9 15 fe ff ff e8 29 12 05 03 66 0f 1f 84 00 00 00 00 00 48 c7 c0 c0 26 06 87 <55> 48 ba 00 00 00 00 00 fc ff df 48 89 c1 53 83 e0 07 89 fb 48 c1
[  424.609166] RSP: 0018:ffff88802ba57d38 EFLAGS: 00000293
[  424.609837] RAX: ffffffff870626c0 RBX: ffff888019e05520 RCX: 0000000000000000
[  424.610699] RDX: ffff88801b8b3580 RSI: ffffffff8186c2f9 RDI: 0000000000000001
[  424.611567] RBP: ffff88802ba57df8 R08: 0000000000000006 R09: 0000000000000001
[  424.612430] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff1100574afad
[  424.613285] R13: ffff88801db3aa70 R14: 0000000000000001 R15: ffff888019e05520
[  424.614174]  ? __mnt_drop_write+0x9/0x80
[  424.614700]  __mnt_drop_write+0x13/0x80
[  424.615221]  touch_atime+0x42f/0x700
[  424.615694]  ? atime_needs_update+0x870/0x870
[  424.616251]  ? down_read_interruptible+0x490/0x490
[  424.616885]  iterate_dir+0x45e/0x700
[  424.617367]  __x64_sys_getdents64+0x13a/0x2c0
[  424.617944]  ? restore_fpregs_from_fpstate+0xbd/0x1c0
[  424.618588]  ? __ia32_sys_getdents+0x2c0/0x2c0
[  424.619170]  ? __x64_sys_getdents+0x2c0/0x2c0
[  424.619747]  ? syscall_enter_from_user_mode+0x1d/0x50
[  424.620387]  ? syscall_enter_from_user_mode+0x1d/0x50
[  424.621041]  do_syscall_64+0x3b/0x90
[  424.621506]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  424.622156] RIP: 0033:0x7f57527209c7
[  424.622619] Code: 00 00 0f 05 eb b9 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 81 fa ff ff ff 7f b8 ff ff ff 7f 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 bc ff ff ff f7 d8 64 89 02 48
[  424.624800] RSP: 002b:00007ffcab5561c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[  424.625754] RAX: ffffffffffffffda RBX: 0000555556917c20 RCX: 00007f57527209c7
[  424.626623] RDX: 0000000000008000 RSI: 0000555556917c50 RDI: 0000000000000003
[  424.627482] RBP: 0000555556917c50 R08: 00000000000000e0 R09: 00007ffcab556090
[  424.628347] R10: 0000555556917cdb R11: 0000000000000293 R12: ffffffffffffffbc
[  424.629205] R13: 0000555556917c24 R14: 0000000000000016 R15: 00007ffcab5573c0
[  424.630095]  </TASK>
[  424.630395] irq event stamp: 527718
[  424.630843] hardirqs last  enabled at (527717): [<ffffffff8178932b>] kasan_quarantine_put+0x8b/0x1f0
[  424.631955] hardirqs last disabled at (527718): [<ffffffff84256a1b>] sysvec_call_function_single+0xb/0xc0
[  424.633116] softirqs last  enabled at (527372): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  424.634174] softirqs last disabled at (527367): [<ffffffff81170a0b>] __irq_exit_rcu+0x11b/0x180
[  424.635245] ---[ end trace 0000000000000000 ]---

VM DIAGNOSIS:
16:10:16  Registers:
info registers vcpu 0
RAX=0000000000000042 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff823bda91 RDI=ffffffff8765c9a0 RBP=ffffffff8765c960 RSP=ffff88806ce09610
R8 =0000000000000001 R9 =000000000000000a R10=0000000000000042 R11=0000000000000001
R12=0000000000000042 R13=ffffffff8765c960 R14=0000000000000010 R15=ffffffff823bda80
RIP=ffffffff823bdae9 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3ebb123310 CR3=0000000029cc4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=00000000000260b5 RBX=1ffff1100578df84 RCX=ffffc90011c59000 RDX=0000000000040000
RSI=ffffffff813bc183 RDI=0000000000000005 RBP=ffff88802bc6fcc8 RSP=ffff88802bc6fc00
R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000200
RIP=ffffffff813bc185 RFL=00000216 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f3d07897700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3d0a435018 CR3=0000000036c42000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f3d0a4087c000007f3d0a4087c8
XMM02=00007f3d0a4087e000007f3d0a4087c0 XMM03=00007f3d0a4087c800007f3d0a4087c0
XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000