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", @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x69, 0x0, 0x0, @ipv4=@empty}, @typed={0xe, 0x1d, 0x0, 0x0, @str='/dev/zero\x00'}]}, 0x1364}, 0x1, 0x0, 0x0, 0x5}, 0x4)
fsetxattr(r1, &(0x7f00000018c0)=@known='system.posix_acl_access\x00', &(0x7f0000001900)='\x9c{\x00', 0x3, 0x2)
sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000001a40))
r5 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r5, 0x80}, {r6, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:03:38 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x4000)
r2 = socket(0x27, 0xa, 0x5)
ppoll(&(0x7f0000000040)=[{r0, 0x4341}, {r1, 0x10}, {r2, 0x2400}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={[0x2]}, 0x8)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xf}, @void, @val={0xc, 0x99, {0x401, 0x24}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20008000)
r4 = socket(0x38, 0xa, 0x604)
sendmsg$NL80211_CMD_TDLS_MGMT(r4, &(0x7f0000000400)={0xfffffffffffffffc, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r3, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x55}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x100}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x5}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:03:38 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
openat$zero(0xffffffffffffff9c, &(0x7f0000004700), 0x430202, 0x0)

19:03:38 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2f60, 0x4e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c010}, 0x800)
openat$zero(0xffffffffffffff9c, &(0x7f0000004700), 0x430202, 0x0)

19:03:38 executing program 2:
getuid()
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x188, 0x19, 0x400, 0x70bd2b, 0x25dfdbff, {0x9}, [@generic="033176760b04ba9fc2cdf44f8aebff6b3414e3f60f13268123790152f84ae83c26ec5df1f7eccc9161bd1654d0af8f05f5d2658580d0ce1b2ad84cc4c1541cb38d9a183b9513885563aaae55a49edbedfcc523a9919408e47c68975056ebe9cce30f4e45a8aec2766c6efc5fbe771d62553e097f6615925b84455f0771f1fb980e3516b1078291e82ab72691ba7127e24572c323724ceb769a343100a88c9c193fb0a908a174b8ead7cae088a44e0c0700ed86d38595977bceb9d9bafa10c5c0b56c9d670ab2", @nested={0xac, 0x5c, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid=r0}, @generic="9d72654ceb1ac0def36506683dc6f75ce27c162c91bb101f17d949e189b8aaee44c1ec52e1dcaa1e99edea8cf793eb4340a4da7615a3ff74ca22bbd7cc14c26c713cb2b360f0b67620ad45b68bfcf812c4f6c0aa5eff4a9a233539ce648b3e3c477fbe1c5dde0aba9bb073cb830bb447c55b4e475e72fc2273e32e74f50ac031af71ccc19ce51c232692dbc0a3e713887c83011f6db296916f3f7a0c57e6b311"]}]}, 0x188}, 0x1, 0x0, 0x0, 0xc840}, 0x21decc1d4b2439ad)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x20040, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:03:38 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x44)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x2, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x40)
pipe2(&(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000001880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001840)={&(0x7f00000004c0)={0x1364, 0x41, 0x400, 0x70bd2d, 0x25dfdbfc, {0x20}, [@typed={0x14, 0x71, 0x0, 0x0, @ipv6=@remote}, @nested={0xea, 0x3e, 0x0, 0x1, [@typed={0x81, 0x8a, 0x0, 0x0, @binary="5ca52d2844c9a5939f9b70bcef226a151ae786667f615fff02302333ad47eb653b39388c61728111ee42673134c04433b160b2986b5cf4e996428f302e1edd2061d629a748e03b2e52beafe2c4b38cfd674d938c9ef0dcd97400bda7140c628e2d108461277039cfdb1288734c3ad2942e4b5cd843c3334876b18508dd"}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x2}, @generic="db52686ce7315935df28ecb327534900f51b4154eadd721ec7467d70d28e52e7fcefddf92c675030a57a449aa8e8f546168722bfc31100fb74b14fc2d7c701e07e3c169ea0698501321a3ea22dc0557d68d5", @typed={0x8, 0x64, 0x0, 0x0, @u32=0xb02}]}, @typed={0xc, 0x85, 0x0, 0x0, @u64=0x58}, @generic="832671027eaa4a62fc2b2a0e141303a8a0d3e63603689bcb49936acddb00fb36a47f23a488a15018ca12d55c5b19f68acb6ac0a3762896301df3f0c2237881ac1287393eb9567ad58f32b20d1d8862423325a0391625720f6c4effbe9bb8dc65871812503a90c5ababb5e0df722b3af4100aef6b8cc51dc912a686597af888cb3ab0abdab7ae18e404a2385c5a0cc04669a6b0f2bc3f0f977ecf1bba05b16300089b0d8b28e2a7830db73cb36fcb9c3a5e553c098b5bd32ed1b159acad114e8447a5b517406d8785017fd9c64b3d9fd6162aa72e111d5645c827cf203851908f339771316bfa1c9b0ed440e786e6256e77588bea1869e5f990c9f476436059", @generic="87dfaa17765466ea7a63c0f7573d2ad5b64fd5b4c014f461a832363782552db25801e6cc9bbbba8926edd5c20c8a1d19dd46824beb9a1da29d541c1b806adf9443eb33af816887712b04d10ea8fe08b7b4618382fb0e752ba36efd40f2775d1bab06b8778572119c72336ce3a442a1c1519fb1ac12d79aed1d1114336f6da571bc87d6e9b906605436b78799d5a82c10da522398e94736c3511a200d99beaeb73a3c90ac1be80b7e8cc3cf1113f22e18206fb3981c765f2040afffa99e3169a9b1144d4e8e1ba58237628ae136c30a9e597ab3bd4806ac07748557576286a56805f9977e05879efe06f70cec78e4d9348c8d72bfe5", @generic="9b8664f6b8b4c05e547ac812954d49c06f6ebbdd0942a37e0b0f026adb8755615e2bb283cf1e3f0b53f3667454", @generic="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", @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x69, 0x0, 0x0, @ipv4=@empty}, @typed={0xe, 0x1d, 0x0, 0x0, @str='/dev/zero\x00'}]}, 0x1364}, 0x1, 0x0, 0x0, 0x5}, 0x4)
fsetxattr(r1, &(0x7f00000018c0)=@known='system.posix_acl_access\x00', &(0x7f0000001900)='\x9c{\x00', 0x3, 0x2)
sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x34, 0x5, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004)
r5 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r5, 0x80}, {r6, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  175.553875] Bluetooth: hci2: command 0x0406 tx timeout
[  175.554823] Bluetooth: hci0: command 0x0406 tx timeout
[  175.554873] Bluetooth: hci5: command 0x0406 tx timeout
[  175.555643] Bluetooth: hci1: command 0x0406 tx timeout
[  175.557671] Bluetooth: hci4: command 0x0406 tx timeout
[  175.558892] Bluetooth: hci7: command 0x0406 tx timeout
19:03:50 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
pipe2(&(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x800, &(0x7f0000000700)={0x2, 0x100000, 0x0, {r3}}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r3, {0x9, 0x7}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r3)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:03:50 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x6, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20048007)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x4000004)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x20, 0x70bd25, 0xfffffffa, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x1c}}, 0x20000000)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20040000)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan0\x00'})

19:03:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r3, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2f60, 0x4e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c010}, 0x800)

19:03:50 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
openat$zero(0xffffffffffffff9c, &(0x7f0000004700), 0x430202, 0x0)

19:03:50 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x4000)
r2 = socket(0x27, 0xa, 0x5)
ppoll(&(0x7f0000000040)=[{r0, 0x4341}, {r1, 0x10}, {r2, 0x2400}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={[0x2]}, 0x8)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xf}, @void, @val={0xc, 0x99, {0x401, 0x24}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20008000)
socket(0x38, 0xa, 0x604)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:03:50 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10000000)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004080}, 0x40)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x144, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x22}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x11}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0xc, 0x17, [0x200, 0x4]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1ff}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}]}}, @CTA_LABELS_MASK={0x14, 0x17, [0x4, 0x100000, 0x5, 0x1ff]}, @CTA_TUPLE_REPLY={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}]}, 0x144}, 0x1, 0x0, 0x0, 0x20008804}, 0x20080000)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x4002, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8001)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4e08401}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44801)
socket(0x2, 0x1, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:03:50 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x44)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x2, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x40)
pipe2(&(0x7f0000000440)={<r3=>0xffffffffffffffff}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000001880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001840)={&(0x7f00000004c0)={0x1364, 0x41, 0x400, 0x70bd2d, 0x25dfdbfc, {0x20}, [@typed={0x14, 0x71, 0x0, 0x0, @ipv6=@remote}, @nested={0xea, 0x3e, 0x0, 0x1, [@typed={0x81, 0x8a, 0x0, 0x0, @binary="5ca52d2844c9a5939f9b70bcef226a151ae786667f615fff02302333ad47eb653b39388c61728111ee42673134c04433b160b2986b5cf4e996428f302e1edd2061d629a748e03b2e52beafe2c4b38cfd674d938c9ef0dcd97400bda7140c628e2d108461277039cfdb1288734c3ad2942e4b5cd843c3334876b18508dd"}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x2}, @generic="db52686ce7315935df28ecb327534900f51b4154eadd721ec7467d70d28e52e7fcefddf92c675030a57a449aa8e8f546168722bfc31100fb74b14fc2d7c701e07e3c169ea0698501321a3ea22dc0557d68d5", @typed={0x8, 0x64, 0x0, 0x0, @u32=0xb02}]}, @typed={0xc, 0x85, 0x0, 0x0, @u64=0x58}, @generic="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", @generic="87dfaa17765466ea7a63c0f7573d2ad5b64fd5b4c014f461a832363782552db25801e6cc9bbbba8926edd5c20c8a1d19dd46824beb9a1da29d541c1b806adf9443eb33af816887712b04d10ea8fe08b7b4618382fb0e752ba36efd40f2775d1bab06b8778572119c72336ce3a442a1c1519fb1ac12d79aed1d1114336f6da571bc87d6e9b906605436b78799d5a82c10da522398e94736c3511a200d99beaeb73a3c90ac1be80b7e8cc3cf1113f22e18206fb3981c765f2040afffa99e3169a9b1144d4e8e1ba58237628ae136c30a9e597ab3bd4806ac07748557576286a56805f9977e05879efe06f70cec78e4d9348c8d72bfe5", @generic="9b8664f6b8b4c05e547ac812954d49c06f6ebbdd0942a37e0b0f026adb8755615e2bb283cf1e3f0b53f3667454", @generic="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", @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x69, 0x0, 0x0, @ipv4=@empty}, @typed={0xe, 0x1d, 0x0, 0x0, @str='/dev/zero\x00'}]}, 0x1364}, 0x1, 0x0, 0x0, 0x5}, 0x4)
fsetxattr(r1, &(0x7f00000018c0)=@known='system.posix_acl_access\x00', &(0x7f0000001900)='\x9c{\x00', 0x3, 0x2)
r4 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r4, 0x80}, {r5, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:03:50 executing program 2:
getuid()
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x188, 0x19, 0x400, 0x70bd2b, 0x25dfdbff, {0x9}, [@generic="033176760b04ba9fc2cdf44f8aebff6b3414e3f60f13268123790152f84ae83c26ec5df1f7eccc9161bd1654d0af8f05f5d2658580d0ce1b2ad84cc4c1541cb38d9a183b9513885563aaae55a49edbedfcc523a9919408e47c68975056ebe9cce30f4e45a8aec2766c6efc5fbe771d62553e097f6615925b84455f0771f1fb980e3516b1078291e82ab72691ba7127e24572c323724ceb769a343100a88c9c193fb0a908a174b8ead7cae088a44e0c0700ed86d38595977bceb9d9bafa10c5c0b56c9d670ab2", @nested={0xac, 0x5c, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid=r0}, @generic="9d72654ceb1ac0def36506683dc6f75ce27c162c91bb101f17d949e189b8aaee44c1ec52e1dcaa1e99edea8cf793eb4340a4da7615a3ff74ca22bbd7cc14c26c713cb2b360f0b67620ad45b68bfcf812c4f6c0aa5eff4a9a233539ce648b3e3c477fbe1c5dde0aba9bb073cb830bb447c55b4e475e72fc2273e32e74f50ac031af71ccc19ce51c232692dbc0a3e713887c83011f6db296916f3f7a0c57e6b311"]}]}, 0x188}, 0x1, 0x0, 0x0, 0xc840}, 0x21decc1d4b2439ad)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x20040, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

[  178.265619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.270125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:03:50 executing program 2:
getuid()
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x188, 0x19, 0x400, 0x70bd2b, 0x25dfdbff, {0x9}, [@generic="033176760b04ba9fc2cdf44f8aebff6b3414e3f60f13268123790152f84ae83c26ec5df1f7eccc9161bd1654d0af8f05f5d2658580d0ce1b2ad84cc4c1541cb38d9a183b9513885563aaae55a49edbedfcc523a9919408e47c68975056ebe9cce30f4e45a8aec2766c6efc5fbe771d62553e097f6615925b84455f0771f1fb980e3516b1078291e82ab72691ba7127e24572c323724ceb769a343100a88c9c193fb0a908a174b8ead7cae088a44e0c0700ed86d38595977bceb9d9bafa10c5c0b56c9d670ab2", @nested={0xac, 0x5c, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid=r0}, @generic="9d72654ceb1ac0def36506683dc6f75ce27c162c91bb101f17d949e189b8aaee44c1ec52e1dcaa1e99edea8cf793eb4340a4da7615a3ff74ca22bbd7cc14c26c713cb2b360f0b67620ad45b68bfcf812c4f6c0aa5eff4a9a233539ce648b3e3c477fbe1c5dde0aba9bb073cb830bb447c55b4e475e72fc2273e32e74f50ac031af71ccc19ce51c232692dbc0a3e713887c83011f6db296916f3f7a0c57e6b311"]}]}, 0x188}, 0x1, 0x0, 0x0, 0xc840}, 0x21decc1d4b2439ad)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x20040, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:03:50 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x44)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x2, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x40)
pipe2(&(0x7f0000000440)={<r3=>0xffffffffffffffff}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000001880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001840)={&(0x7f00000004c0)={0x1364, 0x41, 0x400, 0x70bd2d, 0x25dfdbfc, {0x20}, [@typed={0x14, 0x71, 0x0, 0x0, @ipv6=@remote}, @nested={0xea, 0x3e, 0x0, 0x1, [@typed={0x81, 0x8a, 0x0, 0x0, @binary="5ca52d2844c9a5939f9b70bcef226a151ae786667f615fff02302333ad47eb653b39388c61728111ee42673134c04433b160b2986b5cf4e996428f302e1edd2061d629a748e03b2e52beafe2c4b38cfd674d938c9ef0dcd97400bda7140c628e2d108461277039cfdb1288734c3ad2942e4b5cd843c3334876b18508dd"}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x2}, @generic="db52686ce7315935df28ecb327534900f51b4154eadd721ec7467d70d28e52e7fcefddf92c675030a57a449aa8e8f546168722bfc31100fb74b14fc2d7c701e07e3c169ea0698501321a3ea22dc0557d68d5", @typed={0x8, 0x64, 0x0, 0x0, @u32=0xb02}]}, @typed={0xc, 0x85, 0x0, 0x0, @u64=0x58}, @generic="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", @generic="87dfaa17765466ea7a63c0f7573d2ad5b64fd5b4c014f461a832363782552db25801e6cc9bbbba8926edd5c20c8a1d19dd46824beb9a1da29d541c1b806adf9443eb33af816887712b04d10ea8fe08b7b4618382fb0e752ba36efd40f2775d1bab06b8778572119c72336ce3a442a1c1519fb1ac12d79aed1d1114336f6da571bc87d6e9b906605436b78799d5a82c10da522398e94736c3511a200d99beaeb73a3c90ac1be80b7e8cc3cf1113f22e18206fb3981c765f2040afffa99e3169a9b1144d4e8e1ba58237628ae136c30a9e597ab3bd4806ac07748557576286a56805f9977e05879efe06f70cec78e4d9348c8d72bfe5", @generic="9b8664f6b8b4c05e547ac812954d49c06f6ebbdd0942a37e0b0f026adb8755615e2bb283cf1e3f0b53f3667454", @generic="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", @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x69, 0x0, 0x0, @ipv4=@empty}, @typed={0xe, 0x1d, 0x0, 0x0, @str='/dev/zero\x00'}]}, 0x1364}, 0x1, 0x0, 0x0, 0x5}, 0x4)
r4 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r4, 0x80}, {r5, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  183.745841] Bluetooth: hci3: command 0x0406 tx timeout
[  187.841843] Bluetooth: hci6: command 0x0406 tx timeout
19:04:04 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
pipe2(&(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x800, &(0x7f0000000700)={0x2, 0x100000, 0x0, {r3}}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r4=>r3, {0x9, 0x7}}, './file0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000080)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:04:04 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
openat$zero(0xffffffffffffff9c, &(0x7f0000004700), 0x430202, 0x0)

19:04:04 executing program 2:
getuid()
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x188, 0x19, 0x400, 0x70bd2b, 0x25dfdbff, {0x9}, [@generic="033176760b04ba9fc2cdf44f8aebff6b3414e3f60f13268123790152f84ae83c26ec5df1f7eccc9161bd1654d0af8f05f5d2658580d0ce1b2ad84cc4c1541cb38d9a183b9513885563aaae55a49edbedfcc523a9919408e47c68975056ebe9cce30f4e45a8aec2766c6efc5fbe771d62553e097f6615925b84455f0771f1fb980e3516b1078291e82ab72691ba7127e24572c323724ceb769a343100a88c9c193fb0a908a174b8ead7cae088a44e0c0700ed86d38595977bceb9d9bafa10c5c0b56c9d670ab2", @nested={0xac, 0x5c, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid=r0}, @generic="9d72654ceb1ac0def36506683dc6f75ce27c162c91bb101f17d949e189b8aaee44c1ec52e1dcaa1e99edea8cf793eb4340a4da7615a3ff74ca22bbd7cc14c26c713cb2b360f0b67620ad45b68bfcf812c4f6c0aa5eff4a9a233539ce648b3e3c477fbe1c5dde0aba9bb073cb830bb447c55b4e475e72fc2273e32e74f50ac031af71ccc19ce51c232692dbc0a3e713887c83011f6db296916f3f7a0c57e6b311"]}]}, 0x188}, 0x1, 0x0, 0x0, 0xc840}, 0x21decc1d4b2439ad)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x20040, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:04:04 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x44)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x2, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x40)
pipe2(&(0x7f0000000440), 0x0)
r3 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r3, 0x80}, {r4, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:04 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:04:04 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x6, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20048007)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x4000004)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x20, 0x70bd25, 0xfffffffa, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x1c}}, 0x20000000)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x20040000)

19:04:04 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x4000)
r2 = socket(0x27, 0xa, 0x5)
ppoll(&(0x7f0000000040)=[{r0, 0x4341}, {r1, 0x10}, {r2, 0x2400}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={[0x2]}, 0x8)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xf}, @void, @val={0xc, 0x99, {0x401, 0x24}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20008000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:04:04 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10000000)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004080}, 0x40)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x144, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x22}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x11}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0xc, 0x17, [0x200, 0x4]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1ff}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}]}}, @CTA_LABELS_MASK={0x14, 0x17, [0x4, 0x100000, 0x5, 0x1ff]}, @CTA_TUPLE_REPLY={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}]}, 0x144}, 0x1, 0x0, 0x0, 0x20008804}, 0x20080000)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x4002, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8001)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4e08401}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

[  192.112282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:04:04 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10000000)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004080}, 0x40)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x144, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x22}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x11}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0xc, 0x17, [0x200, 0x4]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1ff}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}]}}, @CTA_LABELS_MASK={0x14, 0x17, [0x4, 0x100000, 0x5, 0x1ff]}, @CTA_TUPLE_REPLY={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}]}, 0x144}, 0x1, 0x0, 0x0, 0x20008804}, 0x20080000)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x4002, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8001)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

[  192.143150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:04:04 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x44)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, 0x2, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x40)
r3 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r3, 0x80}, {r4, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:04 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10000000)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004080}, 0x40)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x144, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x22}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x11}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0xc, 0x17, [0x200, 0x4]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1ff}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}]}}, @CTA_LABELS_MASK={0x14, 0x17, [0x4, 0x100000, 0x5, 0x1ff]}, @CTA_TUPLE_REPLY={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}]}, 0x144}, 0x1, 0x0, 0x0, 0x20008804}, 0x20080000)
openat$zero(0xffffffffffffff9c, &(0x7f00000005c0), 0x4002, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:04:04 executing program 2:
getuid()
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x188, 0x19, 0x400, 0x70bd2b, 0x25dfdbff, {0x9}, [@generic="033176760b04ba9fc2cdf44f8aebff6b3414e3f60f13268123790152f84ae83c26ec5df1f7eccc9161bd1654d0af8f05f5d2658580d0ce1b2ad84cc4c1541cb38d9a183b9513885563aaae55a49edbedfcc523a9919408e47c68975056ebe9cce30f4e45a8aec2766c6efc5fbe771d62553e097f6615925b84455f0771f1fb980e3516b1078291e82ab72691ba7127e24572c323724ceb769a343100a88c9c193fb0a908a174b8ead7cae088a44e0c0700ed86d38595977bceb9d9bafa10c5c0b56c9d670ab2", @nested={0xac, 0x5c, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid=r0}, @generic="9d72654ceb1ac0def36506683dc6f75ce27c162c91bb101f17d949e189b8aaee44c1ec52e1dcaa1e99edea8cf793eb4340a4da7615a3ff74ca22bbd7cc14c26c713cb2b360f0b67620ad45b68bfcf812c4f6c0aa5eff4a9a233539ce648b3e3c477fbe1c5dde0aba9bb073cb830bb447c55b4e475e72fc2273e32e74f50ac031af71ccc19ce51c232692dbc0a3e713887c83011f6db296916f3f7a0c57e6b311"]}]}, 0x188}, 0x1, 0x0, 0x0, 0xc840}, 0x21decc1d4b2439ad)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x20040, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:04:17 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
pipe2(&(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x800, &(0x7f0000000700)={0x2, 0x100000, 0x0, {r3}}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x9, 0x7}}, './file0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r2)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:04:17 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x44)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r2 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r2, 0x80}, {r3, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  205.308151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:04:17 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x6, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20048007)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x4000004)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x20, 0x70bd25, 0xfffffffa, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x1c}}, 0x20000000)

19:04:17 executing program 2:
getuid()
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x188, 0x19, 0x400, 0x70bd2b, 0x25dfdbff, {0x9}, [@generic="033176760b04ba9fc2cdf44f8aebff6b3414e3f60f13268123790152f84ae83c26ec5df1f7eccc9161bd1654d0af8f05f5d2658580d0ce1b2ad84cc4c1541cb38d9a183b9513885563aaae55a49edbedfcc523a9919408e47c68975056ebe9cce30f4e45a8aec2766c6efc5fbe771d62553e097f6615925b84455f0771f1fb980e3516b1078291e82ab72691ba7127e24572c323724ceb769a343100a88c9c193fb0a908a174b8ead7cae088a44e0c0700ed86d38595977bceb9d9bafa10c5c0b56c9d670ab2", @nested={0xac, 0x5c, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid=r0}, @generic="9d72654ceb1ac0def36506683dc6f75ce27c162c91bb101f17d949e189b8aaee44c1ec52e1dcaa1e99edea8cf793eb4340a4da7615a3ff74ca22bbd7cc14c26c713cb2b360f0b67620ad45b68bfcf812c4f6c0aa5eff4a9a233539ce648b3e3c477fbe1c5dde0aba9bb073cb830bb447c55b4e475e72fc2273e32e74f50ac031af71ccc19ce51c232692dbc0a3e713887c83011f6db296916f3f7a0c57e6b311"]}]}, 0x188}, 0x1, 0x0, 0x0, 0xc840}, 0x21decc1d4b2439ad)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x20040, 0x0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:04:17 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10000000)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004080}, 0x40)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x144, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x22}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x11}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0xc, 0x17, [0x200, 0x4]}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1ff}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7f}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}]}}, @CTA_LABELS_MASK={0x14, 0x17, [0x4, 0x100000, 0x5, 0x1ff]}, @CTA_TUPLE_REPLY={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}]}, 0x144}, 0x1, 0x0, 0x0, 0x20008804}, 0x20080000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:04:17 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000004700), 0x430202, 0x0)

19:04:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:04:17 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x4000)
r2 = socket(0x27, 0xa, 0x5)
ppoll(&(0x7f0000000040)=[{r0, 0x4341}, {r1, 0x10}, {r2, 0x2400}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={[0x2]}, 0x8)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

[  205.325318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:04:17 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x44)
r2 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r2, 0x80}, {r3, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:17 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x44)
r2 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r2, 0x80}, {r3, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:17 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x44)
r2 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r2, 0x80}, {r3, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:17 executing program 2:
getuid()
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x188, 0x19, 0x400, 0x70bd2b, 0x25dfdbff, {0x9}, [@generic="033176760b04ba9fc2cdf44f8aebff6b3414e3f60f13268123790152f84ae83c26ec5df1f7eccc9161bd1654d0af8f05f5d2658580d0ce1b2ad84cc4c1541cb38d9a183b9513885563aaae55a49edbedfcc523a9919408e47c68975056ebe9cce30f4e45a8aec2766c6efc5fbe771d62553e097f6615925b84455f0771f1fb980e3516b1078291e82ab72691ba7127e24572c323724ceb769a343100a88c9c193fb0a908a174b8ead7cae088a44e0c0700ed86d38595977bceb9d9bafa10c5c0b56c9d670ab2", @nested={0xac, 0x5c, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @uid=r0}, @generic="9d72654ceb1ac0def36506683dc6f75ce27c162c91bb101f17d949e189b8aaee44c1ec52e1dcaa1e99edea8cf793eb4340a4da7615a3ff74ca22bbd7cc14c26c713cb2b360f0b67620ad45b68bfcf812c4f6c0aa5eff4a9a233539ce648b3e3c477fbe1c5dde0aba9bb073cb830bb447c55b4e475e72fc2273e32e74f50ac031af71ccc19ce51c232692dbc0a3e713887c83011f6db296916f3f7a0c57e6b311"]}]}, 0x188}, 0x1, 0x0, 0x0, 0xc840}, 0x21decc1d4b2439ad)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:04:17 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10000000)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004080}, 0x40)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:04:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:04:17 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
openat$zero(0xffffffffffffff9c, &(0x7f0000004700), 0x430202, 0x0)

19:04:17 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r2 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r2, 0x80}, {r3, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:17 executing program 2:
getuid()
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in=@private, @in=@initdev}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:04:17 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x4000)
r2 = socket(0x27, 0xa, 0x5)
ppoll(&(0x7f0000000040)=[{r0, 0x4341}, {r1, 0x10}, {r2, 0x2400}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={[0x2]}, 0x8)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:04:17 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x6, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20048007)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x4000004)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:04:17 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r1 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r1, 0x80}, {r2, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:17 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10000000)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004080}, 0x40)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:04:17 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
pipe2(&(0x7f00000006c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x800, &(0x7f0000000700)={0x2, 0x100000, 0x0, {r3}}, 0x20)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x9, 0x7}}, './file0\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:04:17 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
openat$zero(0xffffffffffffff9c, &(0x7f0000004700), 0x430202, 0x0)

[  205.794813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.815671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:04:30 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:04:30 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
pipe2(&(0x7f00000006c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x800, &(0x7f0000000700)={0x2, 0x100000, 0x0, {r2}}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:04:30 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x6, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20048007)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x5, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x4000004)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:04:30 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r1 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r1, 0x80}, {r2, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:30 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10000000)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004080}, 0x40)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:04:30 executing program 2:
getuid()
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:04:30 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x4000)
r2 = socket(0x27, 0xa, 0x5)
ppoll(&(0x7f0000000040)=[{r0, 0x4341}, {r1, 0x10}, {r2, 0x2400}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={[0x2]}, 0x8)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:04:30 executing program 6:
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$zero(0xffffffffffffff9c, &(0x7f0000004700), 0x430202, 0x0)

[  218.320933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.324790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:04:30 executing program 6:
openat$zero(0xffffffffffffff9c, &(0x7f0000004700), 0x430202, 0x0)

19:04:30 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10000000)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40004080}, 0x40)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:04:30 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r1 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r1, 0x80}, {r2, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:30 executing program 2:
getuid()
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:04:43 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x4000)
r2 = socket(0x27, 0xa, 0x5)
ppoll(&(0x7f0000000040)=[{r0, 0x4341}, {r1, 0x10}, {r2, 0x2400}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={[0x2]}, 0x8)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:04:43 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
pipe2(&(0x7f00000006c0), 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:04:43 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:04:43 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r3=>r1}, './file0\x00'})
sendmsg$NFT_MSG_GETGEN(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x6, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20048007)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:04:43 executing program 6:
openat$zero(0xffffffffffffff9c, 0x0, 0x430202, 0x0)

19:04:43 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r1 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r1, 0x80}, {r2, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:43 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:04:43 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10000000)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

[  231.011292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  231.013326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:04:43 executing program 6:
openat$zero(0xffffffffffffff9c, 0x0, 0x430202, 0x0)

19:04:43 executing program 6:
openat$zero(0xffffffffffffff9c, 0x0, 0x430202, 0x0)

19:04:43 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:04:43 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000040)={0x3a, @dev={0xac, 0x14, 0x14, 0x20}, 0x4e20, 0x1, 'sed\x00', 0x26, 0x0, 0x6d}, 0x2c)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r1 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r1, 0x80}, {r2, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:43 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:04:43 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:04:43 executing program 6:
openat$zero(0xffffffffffffff9c, &(0x7f0000004700), 0x0, 0x0)

19:04:43 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:04:43 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x4000)
r2 = socket(0x27, 0xa, 0x5)
ppoll(&(0x7f0000000040)=[{r0, 0x4341}, {r1, 0x10}, {r2, 0x2400}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={[0x2]}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:04:43 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:54 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080), 0x80800)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:04:54 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:04:54 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:04:54 executing program 6:
openat$zero(0xffffffffffffff9c, &(0x7f0000004700), 0x0, 0x0)

19:04:54 executing program 4:
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:04:54 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:04:54 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:04:54 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000), 0x4000)
socket(0x27, 0xa, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:04:54 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:04:54 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

[  242.380078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  242.397948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:05:07 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:05:07 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080), 0x80800)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:05:07 executing program 6:
openat$zero(0xffffffffffffff9c, &(0x7f0000004700), 0x0, 0x0)

19:05:07 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000), 0x4000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:05:07 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:05:07 executing program 4:
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:05:07 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:05:07 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

[  255.367463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.370119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:05:07 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:05:07 executing program 4:
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

[  255.427262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.433435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:05:07 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0xae2ac7da9b33948)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:05:07 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080), 0x80800)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:05:07 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:05:07 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:05:07 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:05:07 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0xae2ac7da9b33948)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:05:21 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:05:21 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:05:21 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080), 0x80800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:05:21 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:05:21 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0xae2ac7da9b33948)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:05:21 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:05:21 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18}, './file0\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:05:21 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  269.934517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:05:21 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

[  269.943804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.950659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.952159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:05:22 executing program 3:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:05:22 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:05:22 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:05:22 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:05:22 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:05:22 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:05:22 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:05:22 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:05:22 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:05:22 executing program 0:
pipe2(&(0x7f0000000000), 0x800)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:05:22 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:05:22 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:05:37 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xae2ac7da9b33948)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:05:37 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:05:37 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:05:37 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:05:37 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:05:37 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:05:37 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:05:37 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

[  285.561760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.573098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  285.578273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:05:37 executing program 0:
openat$zero(0xffffffffffffff9c, 0x0, 0x10000, 0x0)

19:05:37 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

[  285.603895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:05:37 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:05:37 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0)={[0x4]}, 0x8)

19:05:37 executing program 0:
openat$zero(0xffffffffffffff9c, 0x0, 0x10000, 0x0)

19:05:37 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:05:37 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:05:37 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:05:50 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0)={[0x4]}, 0x8)

19:05:50 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:05:50 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)

19:05:50 executing program 0:
openat$zero(0xffffffffffffff9c, 0x0, 0x10000, 0x0)

19:05:50 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:05:50 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:05:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:05:50 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

[  298.079371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.100530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:05:50 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

[  298.106290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.121605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:05:50 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)

19:05:50 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:05:50 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

[  298.209142] Zero length message leads to an empty skb
19:05:50 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:05:50 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:05:50 executing program 1:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:06:04 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0)={[0x4]}, 0x8)

19:06:04 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)

[  312.740985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  312.742923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:06:04 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

19:06:04 executing program 1:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:06:04 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:06:04 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:06:04 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:06:04 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  312.785504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:06:04 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  312.795998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:06:04 executing program 0:
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)

19:06:04 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:06:04 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:06:04 executing program 1:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:06:04 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:06:18 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), 0x0, 0x0)

19:06:18 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)

19:06:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:06:18 executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:06:18 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:06:18 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)

19:06:18 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:06:18 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

[  326.835064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.838840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:06:18 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)

[  326.860560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.864110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:06:18 executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:06:18 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:06:18 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), 0x0, 0x0)

19:06:18 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:06:18 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)

19:06:18 executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:06:32 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:06:32 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:06:32 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

[  340.882891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.901368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  340.903812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:06:32 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:06:32 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), 0x0, 0x0)

19:06:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:06:32 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:06:32 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18}, './file0\x00'})

[  340.907530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:06:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:06:32 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0x8)

19:06:32 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:06:33 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)

19:06:33 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:06:33 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0x8)

19:06:33 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x70, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:06:33 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:06:47 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:06:47 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x68, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:06:47 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:06:47 executing program 0:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)

[  355.603365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.621393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:06:47 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:06:47 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

19:06:47 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:06:47 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0x8)

[  355.643197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:06:47 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:06:47 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0x8)

19:06:47 executing program 0:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)

19:06:47 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:06:47 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ppoll(0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0x8)

19:06:47 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:06:47 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x26ba01e6}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:06:47 executing program 0:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)

19:07:01 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:07:01 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:07:01 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:01 executing program 3:
ppoll(0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0x8)

19:07:01 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:07:01 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:07:01 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)

19:07:01 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

[  369.729989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  369.734913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:07:01 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:07:01 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:07:01 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x2c, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:07:01 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:07:01 executing program 3:
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0), 0x8)

19:07:01 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:01 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)

19:07:01 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:07:17 executing program 3:
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0), 0x8)

19:07:17 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:17 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:07:17 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:07:17 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:07:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:07:17 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)

19:07:17 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

[  385.451122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  385.475378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:07:17 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000000)

19:07:17 executing program 5:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:07:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:07:17 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:17 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000000)

19:07:17 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

[  385.629441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:07:17 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:07:17 executing program 4:
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:30 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:07:30 executing program 3:
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0), 0x8)

19:07:30 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000000)

19:07:30 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:07:30 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:07:30 executing program 4:
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:31 executing program 5:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:07:31 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  398.998958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  399.019180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:07:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)

[  399.044479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:07:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:07:31 executing program 4:
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:31 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)

19:07:31 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:07:31 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:45 executing program 3:
ppoll(0x0, 0x0, &(0x7f0000000980), 0x0, 0x0)

19:07:45 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:07:45 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:45 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)

19:07:45 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:07:45 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:07:45 executing program 5:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:07:45 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

[  413.495462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.497571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.525425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:07:45 executing program 3:
ppoll(0x0, 0x0, &(0x7f0000000980), 0x0, 0x0)

19:07:45 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:45 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:07:45 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:45 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:07:45 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4000000)

19:07:45 executing program 3:
ppoll(0x0, 0x0, &(0x7f0000000980), 0x0, 0x0)

19:07:45 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)

19:07:45 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:07:58 executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:07:58 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:07:58 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:07:58 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:58 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:58 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x20004000)

19:07:58 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

[  426.422956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.430090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:07:58 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:07:58 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:58 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:07:58 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:58 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x20004000)

19:07:58 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:58 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

[  426.541365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.546262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:07:58 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:07:58 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:07:58 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x20004000)

19:08:12 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:08:12 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:08:12 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:08:12 executing program 6:
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:08:12 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:08:12 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x4200, 0x0)

19:08:12 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:08:12 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

[  440.222314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.227501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  440.240661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:08:12 executing program 6:
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:08:12 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:08:12 executing program 6:
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:08:12 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:08:12 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:08:12 executing program 3:
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:08:12 executing program 6:
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:08:12 executing program 6:
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:08:26 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:08:26 executing program 3:
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:08:26 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:08:26 executing program 4:
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:08:26 executing program 6:
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:08:26 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:08:26 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:08:26 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x4200, 0x0)

19:08:26 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

[  454.480437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:08:26 executing program 4:
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

[  454.514543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  454.522121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:08:26 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:08:26 executing program 6:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:08:26 executing program 3:
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:08:26 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:08:26 executing program 4:
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:08:26 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:08:39 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:08:39 executing program 6:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:08:39 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:08:39 executing program 4:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:08:39 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:08:39 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:08:39 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x4200, 0x0)

19:08:39 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

[  467.571293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  467.593280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:08:39 executing program 4:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:08:39 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:08:39 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:08:39 executing program 4:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:08:39 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:08:39 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:08:39 executing program 4:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:08:39 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:08:52 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:08:52 executing program 6:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:08:52 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:08:52 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:08:52 executing program 4:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:08:52 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:08:52 executing program 1:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:08:52 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

[  480.240016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:08:52 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:08:52 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

[  480.290423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:08:52 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:08:52 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:08:52 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:08:52 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0xc8, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:08:52 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:08:52 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:08:52 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:09:03 executing program 6:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:03 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0xbc, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:09:03 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:03 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:09:03 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:03 executing program 0:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:09:03 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

19:09:03 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

[  491.811762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:09:03 executing program 0:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

[  491.838369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:09:03 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x80, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:09:03 executing program 0:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:09:03 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:03 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:09:03 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:09:03 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x78, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:09:03 executing program 0:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:09:16 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:09:16 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:09:16 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:16 executing program 6:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:16 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

19:09:16 executing program 0:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:09:16 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x50, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:09:16 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

[  504.859393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:09:16 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:09:16 executing program 1:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

[  504.879037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:09:16 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:16 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:16 executing program 0:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:09:16 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:17 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:17 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:09:17 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:17 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:17 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:31 executing program 6:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:31 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

19:09:31 executing program 0:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)

19:09:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x20004000)

19:09:31 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:31 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:31 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:31 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

[  519.568310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  519.575046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:09:31 executing program 0:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)

19:09:31 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x0)

19:09:31 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:31 executing program 0:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)

19:09:44 executing program 6:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:44 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

19:09:44 executing program 3:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:44 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:44 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:44 executing program 0:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)

19:09:44 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

19:09:44 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

[  532.374350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  532.385600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:09:44 executing program 3:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:44 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:44 executing program 3:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:44 executing program 0:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)

19:09:44 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:44 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:44 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:44 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:56 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:09:56 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:56 executing program 6:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:56 executing program 4:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

19:09:56 executing program 0:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)

19:09:56 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:09:56 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

19:09:56 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

[  544.083160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:09:56 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:56 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:56 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:09:56 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:56 executing program 4:
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)

19:09:56 executing program 2:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:09:56 executing program 0:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)

19:09:56 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:09:56 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:09:56 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:10 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:10:10 executing program 2:
syz_open_procfs$userns(0x0, 0x0)

19:10:10 executing program 0:
syz_open_procfs$userns(0x0, 0x0)

19:10:10 executing program 4:
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)

19:10:10 executing program 6:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:10:10 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

19:10:10 executing program 1:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:10 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

[  558.058779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:10:10 executing program 1:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:10 executing program 0:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:10 executing program 2:
syz_open_procfs$userns(0x0, 0x0)

19:10:10 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0), 0x8)

19:10:10 executing program 4:
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)

19:10:10 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:10 executing program 0:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:10 executing program 1:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:23 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:23 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0), 0x8)

19:10:23 executing program 6:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:10:23 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)

[  571.628476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:10:23 executing program 0:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:23 executing program 1:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:23 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:23 executing program 2:
syz_open_procfs$userns(0x0, 0x0)

19:10:23 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0), 0x8)

19:10:23 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:23 executing program 0:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:23 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0), 0x8)

19:10:23 executing program 1:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:23 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:23 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:23 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0), 0x8)

19:10:40 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:10:40 executing program 1:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:40 executing program 5:
syz_80211_inject_frame(0x0, 0x0, 0x0)

19:10:40 executing program 0:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:40 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0), 0x8)

19:10:40 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

[  588.487645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:10:40 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0), 0x8)

19:10:40 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:10:40 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:40 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:10:40 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:10:40 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0), 0x8)

19:10:40 executing program 0:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:40 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:40 executing program 3:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:40 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:10:53 executing program 6:
r0 = syz_open_procfs$userns(0x0, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:10:53 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0), 0x8)

19:10:53 executing program 5:
syz_80211_inject_frame(0x0, 0x0, 0x0)

19:10:53 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:53 executing program 2:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:10:53 executing program 4:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:10:53 executing program 0:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:53 executing program 3:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:53 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

[  601.665134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:10:53 executing program 4:
syz_open_procfs$userns(0x0, 0x0)

19:10:53 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:53 executing program 2:
syz_open_procfs$userns(0x0, 0x0)

19:10:53 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:10:53 executing program 0:
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:07 executing program 6:
r0 = syz_open_procfs$userns(0x0, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:11:07 executing program 5:
syz_80211_inject_frame(0x0, 0x0, 0x0)

19:11:07 executing program 2:
syz_open_procfs$userns(0x0, 0x0)

19:11:07 executing program 7:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:07 executing program 3:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:07 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:07 executing program 4:
syz_open_procfs$userns(0x0, 0x0)

19:11:07 executing program 0:
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

[  615.873944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:11:07 executing program 4:
syz_open_procfs$userns(0x0, 0x0)

19:11:07 executing program 3:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:07 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:07 executing program 2:
syz_open_procfs$userns(0x0, 0x0)

19:11:08 executing program 0:
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:08 executing program 7:
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:08 executing program 3:
syz_open_procfs$userns(0x0, 0x0)

19:11:08 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:19 executing program 6:
r0 = syz_open_procfs$userns(0x0, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:11:19 executing program 7:
r0 = syz_open_procfs$userns(0x0, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:11:19 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:19 executing program 3:
syz_open_procfs$userns(0x0, 0x0)

19:11:19 executing program 0:
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:19 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:19 executing program 4:
r0 = syz_open_procfs$userns(0x0, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:11:19 executing program 2:
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:19 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:19 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:19 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:19 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:19 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:11:19 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:19 executing program 1:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:32 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:11:32 executing program 6:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:11:32 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:32 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:32 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:32 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:32 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:32 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:32 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:33 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:33 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:33 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:33 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)

19:11:33 executing program 7:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:33 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:11:33 executing program 0:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:46 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:11:46 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:46 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:46 executing program 0:
syz_open_procfs$userns(0x0, 0x0)

19:11:46 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:11:46 executing program 6:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:11:46 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)

19:11:46 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:11:46 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:46 executing program 0:
syz_open_procfs$userns(0x0, 0x0)

19:11:46 executing program 1:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:46 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:11:46 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)

19:11:46 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:11:46 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:46 executing program 5:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:11:46 executing program 0:
syz_open_procfs$userns(0x0, 0x0)

19:11:46 executing program 3:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:11:46 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)

19:11:59 executing program 6:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:11:59 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:59 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:11:59 executing program 1:
syz_open_procfs$userns(0x0, 0x0)

19:11:59 executing program 5:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:11:59 executing program 3:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:11:59 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:11:59 executing program 0:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:59 executing program 5:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:11:59 executing program 4:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:11:59 executing program 3:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:11:59 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)

19:11:59 executing program 0:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:11:59 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)

19:11:59 executing program 4:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:11:59 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:12:15 executing program 2:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)

19:12:15 executing program 5:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:12:15 executing program 7:
socketpair(0x0, 0x0, 0x0, 0x0)

19:12:15 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:12:15 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:12:15 executing program 0:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:15 executing program 4:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:12:15 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:12:15 executing program 3:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:12:15 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:12:15 executing program 5:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:12:15 executing program 1:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:12:15 executing program 2:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)

19:12:15 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

[  683.594482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:12:15 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:15 executing program 5:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:12:36 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:12:36 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:36 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:36 executing program 5:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:12:36 executing program 2:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)

19:12:36 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:36 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:36 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:12:36 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:36 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:12:36 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:12:36 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:12:36 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:36 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:36 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:36 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:12:36 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:12:36 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:12:36 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:12:36 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:12:48 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:12:48 executing program 1:
syz_open_dev$usbmon(0x0, 0x0, 0x0)

19:12:48 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:12:48 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:48 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:48 executing program 5:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:12:48 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:12:48 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:12:48 executing program 4:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:01 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:13:01 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:13:01 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:01 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:01 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:01 executing program 7:
syz_open_dev$usbmon(0x0, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:13:01 executing program 1:
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:13:01 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:01 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:13:01 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x50, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:13:01 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:13:01 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}, {r1, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:01 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:01 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:01 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:13:01 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:13:01 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {0xffffffffffffffff, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:01 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:13:16 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:13:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x50, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:13:16 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

19:13:16 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {0xffffffffffffffff, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:16 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

19:13:16 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:16 executing program 6:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:16 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)

19:13:16 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)

[  744.717618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  744.720298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:13:16 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:16 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:13:16 executing program 0:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)

19:13:16 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

19:13:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x50, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:13:16 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)

19:13:16 executing program 0:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)

[  744.867505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:13:16 executing program 5:
socketpair(0x0, 0x0, 0x0, 0x0)

19:13:16 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:16 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

[  744.956532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:13:17 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:29 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

[  757.167140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:13:29 executing program 0:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)

19:13:29 executing program 1:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:29 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

19:13:29 executing program 6:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:29 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {0xffffffffffffffff, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:29 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:29 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

[  757.190178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  757.201082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:13:29 executing program 1:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:29 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:29 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:13:29 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:13:29 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

[  772.579965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:13:44 executing program 1:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:44 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:44 executing program 6:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:44 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{}, {r0, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:44 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:13:44 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0)

19:13:44 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {0xffffffffffffffff, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:44 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:13:44 executing program 7:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:44 executing program 0:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {0xffffffffffffffff, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:44 executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:44 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:44 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{}, {r0, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:44 executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:44 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{}, {r0, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:59 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:13:59 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:59 executing program 0:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:59 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

19:13:59 executing program 1:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:59 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:13:59 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:13:59 executing program 6:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  787.271600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:13:59 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:59 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x0)

19:13:59 executing program 7:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:13:59 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:59 executing program 5:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:13:59 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x0)

19:13:59 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x0)

19:14:14 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x0)

19:14:14 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:14 executing program 6:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:14 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x0)

19:14:14 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)

19:14:14 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

19:14:14 executing program 7:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:14:14 executing program 5:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}}, 0x0)

19:14:14 executing program 7:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:14:14 executing program 5:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:14:14 executing program 7:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:14:14 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:14 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:14 executing program 7:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

[  802.146119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:14:14 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x0)

19:14:14 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

[  804.489833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  804.498061] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  804.499872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  804.504026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  804.506315] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  804.508205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  806.529646] Bluetooth: hci1: command 0x0409 tx timeout
[  808.577622] Bluetooth: hci1: command 0x041b tx timeout
[  810.625596] Bluetooth: hci1: command 0x040f tx timeout
[  812.679841] Bluetooth: hci1: command 0x0419 tx timeout
[  812.716516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  812.718709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  812.721168] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  812.755519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  812.757133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  812.759397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  812.933956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:14:39 executing program 7:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:14:39 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:39 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:39 executing program 0:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:39 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

19:14:39 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

19:14:39 executing program 6:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:39 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:39 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

19:14:39 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

19:14:39 executing program 7:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:14:39 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x0)

19:14:39 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)

19:14:39 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)

19:14:39 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)

19:14:39 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:52 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:52 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)

19:14:52 executing program 7:
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:14:52 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x4200, 0x0)

19:14:52 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x4200, 0x0)

19:14:52 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:52 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:14:52 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)

[  840.694435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  840.699749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:14:52 executing program 7:
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:14:52 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)

19:14:52 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)

19:14:52 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)

19:14:52 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)

19:14:52 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x4200, 0x0)

[  840.876799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:14:52 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)

19:14:52 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)

19:15:04 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)

19:15:04 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:04 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:04 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x4200, 0x0)

19:15:04 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)

19:15:04 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0)

19:15:04 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:04 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

[  852.963234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  852.975031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:15:05 executing program 4:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:05 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:15:05 executing program 1:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

[  853.060377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  853.069880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:15:05 executing program 1:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:15:05 executing program 1:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:15:05 executing program 1:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x0)

[  864.353246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:15:16 executing program 4:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:16 executing program 1:
pipe2(0x0, 0x0)

19:15:16 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:16 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:15:16 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:15:16 executing program 7:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:15:16 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:16 executing program 3:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:15:16 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  864.419490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  864.429759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:15:16 executing program 7:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:15:16 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:15:16 executing program 7:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

[  864.504225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  864.509190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:15:16 executing program 7:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x0)

19:15:16 executing program 7:
pipe2(&(0x7f0000000340), 0x0)

19:15:16 executing program 7:
pipe2(0x0, 0x0)

19:15:16 executing program 7:
pipe2(0x0, 0x0)

19:15:29 executing program 7:
pipe2(0x0, 0x0)

19:15:29 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{}, {0xffffffffffffffff, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:29 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:29 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:15:29 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:29 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:15:29 executing program 4:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:15:29 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

[  877.408712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.411328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.414676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.420231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.431778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.437382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.443883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:15:29 executing program 7:
pipe2(0x0, 0x0)

19:15:29 executing program 7:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:29 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:15:29 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:15:29 executing program 4:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:15:29 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

[  877.784759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.795404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.796893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.803072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.805287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.811219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.816269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:15:30 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:15:30 executing program 4:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:15:30 executing program 0:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[  878.162715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  878.192157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  878.196165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  878.197575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:15:30 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{}, {0xffffffffffffffff, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:30 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

19:15:30 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:15:30 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000000)

19:15:30 executing program 7:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:15:30 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x2, 0x7, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:15:30 executing program 5:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:15:30 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:30 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:15:42 executing program 5:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:15:42 executing program 4:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:15:42 executing program 7:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:15:42 executing program 0:
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:15:42 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:15:42 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:15:42 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:15:42 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{}, {0xffffffffffffffff, 0xe280}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  890.815036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  890.823101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  890.826142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  890.828981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  890.831292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  890.832779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:15:56 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:15:56 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:15:56 executing program 7:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:15:56 executing program 4:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:15:56 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:15:56 executing program 0:
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:15:56 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:15:56 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{}, {r0}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  904.084174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  904.090481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  904.093791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  904.098920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  904.100587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  904.106162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:15:56 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:15:56 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)

19:15:56 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:15:56 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:15:56 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x2, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:15:56 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:15:56 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:15:56 executing program 4:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[  904.519303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  904.524865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  904.539102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  917.513947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  917.515888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  917.519628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:09 executing program 7:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:16:09 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{}, {r0}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:16:09 executing program 0:
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:16:09 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:16:09 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:16:09 executing program 4:
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:16:09 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0), 0x8)

19:16:09 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

[  917.522834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  917.543065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:09 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  917.554361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:09 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

19:16:09 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:16:09 executing program 0:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

[  917.868328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  917.872308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  917.886074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  917.889785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  917.895422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:09 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18}, './file0\x00'})

[  917.925187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  917.928402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:10 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

[  918.227323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:10 executing program 0:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

[  918.248728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  918.258907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:10 executing program 5:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

[  918.287324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:10 executing program 7:
ppoll(&(0x7f0000001c40)=[{}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:16:10 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18}, './file0\x00'})

[  918.422311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  918.434280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:10 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{}, {r0}], 0x2, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:16:10 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0), 0x8)

19:16:10 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:16:10 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:16:10 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:16:10 executing program 0:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

19:16:10 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:16:10 executing program 5:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

[  918.654193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  918.670668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  929.218613] Bluetooth: hci1: command 0x0406 tx timeout
19:16:25 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

19:16:25 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:16:25 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18}, './file0\x00'})

19:16:25 executing program 7:
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:16:25 executing program 5:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

19:16:25 executing program 0:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

[  933.198349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  933.215444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:25 executing program 6:
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0}, {}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0), 0x8)

19:16:25 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})

[  933.223118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  933.230260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  933.234801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  933.244728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:25 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0xe280}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:16:25 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)

19:16:25 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)

19:16:25 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

19:16:25 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

19:16:25 executing program 3:
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

19:16:25 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

19:16:25 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

19:16:25 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)

[  933.575173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:25 executing program 4:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), 0x0, 0x0)

19:16:25 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)

[  933.592989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  948.524695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:40 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0xe280}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:16:40 executing program 7:
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:16:40 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:16:40 executing program 0:

19:16:40 executing program 5:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:16:40 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)

19:16:40 executing program 4:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), 0x0, 0x0)

19:16:40 executing program 6:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:16:40 executing program 6:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0xe280}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:16:40 executing program 4:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), 0x0, 0x0)

19:16:40 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

19:16:40 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

19:16:40 executing program 0:

19:16:40 executing program 4:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ppoll(0x0, 0x0, &(0x7f0000000980), 0x0, 0x0)

[  948.681292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  948.686842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:40 executing program 4:
ppoll(0x0, 0x0, &(0x7f0000000980), 0x0, 0x0)

[  948.700743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  948.709397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  948.721834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:16:40 executing program 0:

[  948.829943] syz-executor.1 (295) used greatest stack depth: 24016 bytes left
[  953.153666] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  957.377610] Bluetooth: hci0: Opcode 0x c03 failed: -110
[  959.568069] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  959.574166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  959.576309] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  959.580480] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  959.582722] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  959.584643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  961.601565] Bluetooth: hci0: command 0x0409 tx timeout
[  963.649567] Bluetooth: hci0: command 0x041b tx timeout
[  965.697529] Bluetooth: hci0: command 0x040f tx timeout
[  967.746559] Bluetooth: hci0: command 0x0419 tx timeout
[  967.896276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.897934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.901905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  967.943387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  967.944977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  967.947290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  968.113860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  968.121079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:13 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0xe280}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:17:13 executing program 4:
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

[  982.007594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.016113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:14 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)

19:17:14 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:17:14 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

19:17:14 executing program 7:
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:17:14 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

19:17:14 executing program 0:
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  982.030907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.038331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.041311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.053016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.058224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.060311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.067899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:14 executing program 6:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:17:14 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

19:17:14 executing program 0:
syz_80211_inject_frame(0x0, 0x0, 0x0)

19:17:14 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18}, './file0\x00'})

19:17:14 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

[  982.464221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.482032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.512803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.515076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.517346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.522385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  982.528976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:14 executing program 6:
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  982.563808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:14 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:17:14 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:17:26 executing program 4:
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

19:17:26 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:17:26 executing program 0:
syz_80211_inject_frame(0x0, 0x0, 0x0)

19:17:26 executing program 6:
syz_80211_inject_frame(0x0, 0x0, 0x0)

19:17:26 executing program 7:
ppoll(&(0x7f0000001c40)=[{}], 0x1, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:17:26 executing program 5:
syz_80211_inject_frame(0x0, 0x0, 0x0)

19:17:26 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18}, './file0\x00'})

19:17:26 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

[  994.532349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.537962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.541580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.544042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.548175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.552904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.556906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:26 executing program 5:
syz_80211_inject_frame(0x0, 0x0, 0x0)

19:17:26 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18}, './file0\x00'})

19:17:26 executing program 0:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0xe280}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

[  994.896336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:26 executing program 6:
syz_80211_inject_frame(0x0, 0x0, 0x0)

[  994.906025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.912116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:26 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

[  994.950089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.955335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  994.961268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:27 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

[  995.238577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:27 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18}, './file0\x00'})

[  995.257333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:27 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)

[  995.304888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  995.316584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  995.326369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  995.331839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:41 executing program 4:
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

19:17:41 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)

19:17:41 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:17:41 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:17:41 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

19:17:41 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

[ 1009.244666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.251081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:41 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:17:41 executing program 7:
ppoll(&(0x7f0000001c40), 0x0, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

[ 1009.261726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.267263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.274231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.274727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.276622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.280783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.282627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.286081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:41 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:17:41 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)

19:17:41 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:17:41 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)

19:17:41 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)

[ 1009.661263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.673588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.689714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.690215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.701617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.713936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.720196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.721972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1009.730780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:42 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

19:17:42 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)

19:17:42 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)

[ 1010.067725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1010.092273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1010.124215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1010.126009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1010.154562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:55 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)

19:17:55 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:17:55 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)

19:17:55 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:17:55 executing program 7:
ppoll(&(0x7f0000001c40), 0x0, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:17:55 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)

19:17:55 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)

[ 1023.179850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.189921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.191715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.201244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.206037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.210301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.217142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:55 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 1023.220531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.222173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.228089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:17:55 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:17:55 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)

19:17:55 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 1023.613199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.629758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.630432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.637219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.644440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:18:10 executing program 7:
ppoll(&(0x7f0000001c40), 0x0, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:18:10 executing program 1:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:18:10 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:18:10 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, 0x0, 0x0, 0x0)

19:18:10 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 1038.335527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.338491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.341978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:18:10 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)

19:18:10 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)

19:18:10 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 1038.345801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.353641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.355778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.362315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.366964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.375105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:18:10 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

[ 1038.380027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:18:10 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:18:10 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)

[ 1038.730892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.740086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.746067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.770049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:18:23 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)

19:18:23 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:18:23 executing program 7:
ppoll(&(0x7f0000001c40)=[{}], 0x1, 0x0, 0x0, 0x0)

19:18:23 executing program 5:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:18:23 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet6_tcp(0xa, 0x1, 0x0)

19:18:23 executing program 1:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:18:23 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:18:23 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

[ 1051.042154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1051.042316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1051.048169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1051.050064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1051.054736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1051.055295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1051.057802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1051.062911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1051.065851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1051.073209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:18:23 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:18:23 executing program 2:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:18:23 executing program 2:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:18:36 executing program 7:
ppoll(&(0x7f0000001c40)=[{}], 0x1, 0x0, 0x0, 0x0)

19:18:36 executing program 2:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:18:36 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:18:36 executing program 1:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:18:36 executing program 4:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0)={[0x4]}, 0x8)

19:18:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:18:36 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:18:36 executing program 5:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1064.298159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1064.304556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1064.307344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1064.308973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1064.311899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1064.318097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:18:36 executing program 2:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:18:36 executing program 2:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340), 0x800)

19:18:36 executing program 2:
pipe2(&(0x7f0000000340), 0x800)

19:18:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:18:36 executing program 2:
pipe2(&(0x7f0000000340), 0x800)

19:18:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:18:36 executing program 2:
pipe2(&(0x7f0000000340), 0x800)

19:18:36 executing program 2:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x800)

19:18:49 executing program 2:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x800)

19:18:49 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:18:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})

19:18:49 executing program 1:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:18:49 executing program 4:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0)={[0x4]}, 0x8)

19:18:49 executing program 7:
ppoll(&(0x7f0000001c40)=[{}], 0x1, 0x0, 0x0, 0x0)

19:18:49 executing program 5:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1077.853959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1077.854734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:18:49 executing program 3:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1077.870908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:18:49 executing program 2:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000340), 0x800)

19:18:49 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:18:49 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)

19:18:49 executing program 2:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x800)

19:18:49 executing program 2:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x800)

19:18:50 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:18:50 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:18:50 executing program 2:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(0x0, 0x800)

[ 1084.867025] Bluetooth: hci0: command 0x0406 tx timeout
19:19:03 executing program 2:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
pipe2(&(0x7f0000000340), 0x0)

19:19:03 executing program 4:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0)={[0x4]}, 0x8)

19:19:03 executing program 1:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1091.169327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:19:03 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:03 executing program 0:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:03 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:03 executing program 3:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:19:03 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[ 1091.172754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:19:03 executing program 6:
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:03 executing program 6:
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:03 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:03 executing program 0:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:03 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:03 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:03 executing program 6:
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:03 executing program 0:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:03 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:19:18 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:18 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:18 executing program 4:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0)={[0x4]}, 0x8)

19:19:18 executing program 6:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:18 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:19:18 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:18 executing program 3:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:19:18 executing program 1:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:19:18 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

[ 1106.813720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1106.825278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:19:18 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:19:18 executing program 6:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:18 executing program 0:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:18 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:19:19 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:19 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

19:19:19 executing program 6:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:19 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})

19:19:34 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:19:34 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

19:19:34 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:34 executing program 4:
ppoll(0x0, 0x0, 0x0, &(0x7f00000009c0)={[0x4]}, 0x8)

19:19:34 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:19:34 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x20004000)

19:19:34 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)

19:19:34 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:19:34 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

[ 1122.150976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1122.168156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:19:34 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:34 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x20004000)

19:19:34 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:34 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))

19:19:34 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:46 executing program 2:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:46 executing program 4:
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)

19:19:46 executing program 7:
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))

19:19:46 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x20004000)

19:19:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:46 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:19:46 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:46 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1134.596711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1134.596807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1134.599325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:19:46 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

[ 1134.635678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:19:46 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:46 executing program 2:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:46 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:46 executing program 7:
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))

19:19:46 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:46 executing program 2:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:46 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:59 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:59 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:59 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:59 executing program 7:
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))

19:19:59 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:59 executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:59 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:19:59 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1147.450936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1147.452601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1147.460397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1147.462337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:19:59 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:59 executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:59 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:59 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:59 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:59 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))

19:19:59 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:59 executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:59 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:59 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:19:59 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:59 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:19:59 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:19:59 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))

19:19:59 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:19:59 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:19:59 executing program 5:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[ 1147.894819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1147.897077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1147.906299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1147.916379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1161.596589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:20:13 executing program 5:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:20:13 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

19:20:13 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:13 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))

19:20:13 executing program 4:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:13 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:20:13 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:20:13 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1161.598182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1161.600172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1161.604879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:20:13 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:20:13 executing program 4:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:13 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:20:13 executing program 4:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:13 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:13 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:20:13 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

19:20:13 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:28 executing program 5:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:20:28 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:20:28 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))

19:20:28 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:20:28 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:28 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

19:20:28 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:28 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1176.031851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1176.044715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1176.062155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1176.065724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1188.769483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:20:40 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000280))

19:20:40 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:40 executing program 5:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:20:40 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:20:40 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:40 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0xc8, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:20:40 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:20:40 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

[ 1188.774037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1188.781210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1188.799195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:20:40 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:40 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:40 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

19:20:40 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:40 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)

19:20:40 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0xbc, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:20:40 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x80, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x80}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:20:40 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:40 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

19:20:40 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:55 executing program 5:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:20:55 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

19:20:55 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x78, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:20:55 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)

19:20:55 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:55 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

19:20:55 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

[ 1203.798105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1203.824353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:20:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:55 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:55 executing program 3:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:20:55 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:55 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)

19:20:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:20:55 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x50, 0xb, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:21:10 executing program 5:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:21:10 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:10 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:10 executing program 3:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:21:10 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:10 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:10 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:21:10 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

[ 1218.981748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1218.994712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:21:11 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:11 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:11 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x20004000)

19:21:11 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:11 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:11 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:11 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:24 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x20004000)

19:21:24 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:24 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:24 executing program 5:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:21:24 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:24 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x0)

19:21:24 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:24 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

[ 1232.300522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1232.314935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:21:24 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:21:24 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:21:24 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:24 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:21:24 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:24 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:24 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:24 executing program 7:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:24 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:24 executing program 3:
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:21:24 executing program 7:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:36 executing program 3:
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:21:36 executing program 5:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:21:36 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:36 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:21:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:36 executing program 7:
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:36 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

[ 1244.219078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1244.233582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:21:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:36 executing program 3:
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:21:36 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

19:21:36 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

[ 1244.303030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:21:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:36 executing program 7:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

[ 1244.311133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:21:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:36 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:21:36 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:21:50 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

19:21:50 executing program 5:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:21:50 executing program 3:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:21:50 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:50 executing program 7:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:50 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x4004)

19:21:50 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:50 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1258.520737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1258.534619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1258.538492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1258.550444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:21:50 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:50 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x20004000)

19:21:50 executing program 7:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:50 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)

19:21:50 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:50 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:21:50 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

19:21:50 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:04 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x20004000)

19:22:04 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1272.263201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1272.271630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1272.273966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:22:04 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

19:22:04 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:04 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

19:22:04 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:04 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:04 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[ 1272.279265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:22:04 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

19:22:04 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x20004000)

19:22:04 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:04 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

19:22:04 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4004)

19:22:04 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:18 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:22:18 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:22:18 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:18 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:18 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

19:22:18 executing program 0:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:22:18 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:18 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1286.619707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:22:18 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:22:18 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

[ 1286.637433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1286.648527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1286.652710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:22:18 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:22:18 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:18 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:22:18 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x4004)

[ 1286.722298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:22:18 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

[ 1286.740123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:22:18 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)

19:22:18 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:32 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:22:32 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:32 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:32 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:22:32 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:22:32 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x1, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:32 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:22:32 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1300.238247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1300.241491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1300.259734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1300.262581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1300.269119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:22:32 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

[ 1300.282987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:22:32 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:32 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:22:32 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:22:32 executing program 0:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[ 1314.730929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1314.748130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:22:46 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:22:46 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:22:46 executing program 2:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:22:46 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:22:46 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:46 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:22:46 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:22:46 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[ 1314.758746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1314.759294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1314.770343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1314.772080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:22:46 executing program 5:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0xe280}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[ 1314.786867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:22:46 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:22:46 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:47 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:22:47 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1315.088813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1315.095543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:22:47 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0), 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:22:47 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:22:47 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:22:47 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

[ 1317.080237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1317.082285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1317.084935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1317.088573] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1317.090740] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1317.092448] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1319.106437] Bluetooth: hci0: command 0x0409 tx timeout
[ 1321.154427] Bluetooth: hci0: command 0x041b tx timeout
[ 1323.201465] Bluetooth: hci0: command 0x040f tx timeout
[ 1324.115945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1324.117606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1324.120009] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1324.169033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1324.171177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1324.173754] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1324.330738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1324.335918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1325.249595] Bluetooth: hci0: command 0x0419 tx timeout
19:23:09 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:09 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:09 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:09 executing program 5:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0xe280}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:23:09 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:23:09 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1337.084668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:23:09 executing program 2:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(0x0, 0x0, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:23:09 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

[ 1337.101004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1337.102971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1337.114895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:23:09 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4004)

[ 1337.122092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1337.127843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:23:09 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:23:09 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:09 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:09 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x20004000)

[ 1337.235868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1337.250634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:23:24 executing program 5:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0xe280}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:23:24 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1352.575536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1352.577977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:23:24 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:24 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:24 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:24 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)

19:23:24 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:24 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x0)

[ 1352.584921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1352.587525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1352.589816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1352.591777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1352.603067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1352.610988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1352.616328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:23:24 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:24 executing program 3:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0xe280}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:23:24 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:24 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:24 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:24 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:24 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)

19:23:24 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1352.953201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1352.959179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1352.970371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1364.145712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:23:36 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:36 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)

19:23:36 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:36 executing program 3:
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0xe280}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:23:36 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:23:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:36 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:36 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)

[ 1364.150014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1364.152330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1364.155745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1364.157229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1364.161830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1364.173147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1364.173921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:23:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:36 executing program 0:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:36 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:36 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:36 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:36 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:36 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1364.592878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1364.615087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1364.632311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1364.656762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1364.679900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:23:51 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:23:51 executing program 6:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:23:51 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:51 executing program 0:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1379.508197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:23:51 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:51 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:51 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:51 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

[ 1379.518288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1379.522132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1379.524167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1379.526219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:23:51 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:51 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:23:51 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:23:51 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1379.625284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1379.629214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1379.668700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1379.677763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:23:51 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

19:24:05 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0}], 0x1, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:24:05 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:05 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}}, 0x4004)

19:24:05 executing program 0:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:05 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:05 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:05 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:05 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1393.767075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.768043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.771779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.772127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.783895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.784787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.788205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.790910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.800753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.801200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.807058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:05 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}}, 0x4004)

19:24:05 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}}, 0x4004)

19:24:05 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x0)

19:24:05 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x0)

19:24:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048014}, 0x0)

19:24:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x38}}, 0x4004)

19:24:06 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1394.096881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1394.105238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:06 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1394.149728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1394.155478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1405.623303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:17 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:24:17 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:17 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:17 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:17 executing program 0:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:17 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x68, {0x0, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:17 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:17 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1405.629792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1405.635591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1405.636792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1405.638563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1405.643264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1405.647987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1405.651084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1405.652871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:17 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

[ 1405.662847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1405.666621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1405.668764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1405.672827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:17 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:24:17 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, &(0x7f0000001c80)={0x77359400}, 0x0, 0x0)

19:24:17 executing program 5:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0xe280}], 0x1, 0x0, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:24:17 executing program 5:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1405.784613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:17 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x55, {0x0, 0x5, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xaf)

19:24:17 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:17 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)

[ 1406.006369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:18 executing program 0:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1406.044169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1406.078853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1406.084158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1410.369501] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 1412.558809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1412.561772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1412.563968] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1412.567951] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1412.571245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1412.573027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1414.593425] Bluetooth: hci0: command 0x0409 tx timeout
[ 1416.641434] Bluetooth: hci0: command 0x041b tx timeout
[ 1418.689433] Bluetooth: hci0: command 0x040f tx timeout
[ 1420.737435] Bluetooth: hci0: command 0x0419 tx timeout
[ 1420.836710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1420.838702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1420.852969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1420.866927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1420.868555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1420.871418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1421.065879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1421.070979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:44 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x48, {0x0, 0x4, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xa2)

19:24:44 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:24:44 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:44 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1432.481031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:44 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:24:44 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:44 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{0xffffffffffffffff, 0x80}, {r0, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[ 1432.500785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:44 executing program 0:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1432.507672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:44 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {0xffffffffffffffff, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[ 1432.528978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.538220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.542584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.554309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.558729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.566558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:44 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1432.577373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.588846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:44 executing program 7:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1432.638688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:44 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x35, {0x0, 0x3, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x8f)

19:24:44 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:44 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x48, {0x0, 0x4, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xa2)

19:24:44 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x48, {0x0, 0x4, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xa2)

[ 1432.902283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.911050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.927204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.936106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.937700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:44 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x48, {0x0, 0x4, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xa2)

[ 1432.946054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.951279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.957437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:44 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:44 executing program 7:
syz_open_dev$usbmon(&(0x7f0000000080), 0x3b69, 0x0)
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

[ 1432.970810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.978724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.985633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1432.993223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:45 executing program 7:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:24:45 executing program 7:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1433.084198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:45 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x22, {0x0, 0x2, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x7c)

[ 1433.316218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1433.331038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:59 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x48, {0x0, 0x4, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xa2)

19:24:59 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x15, {0x0, 0x1, [@ext={{}, @device_a, 0x4, @device_b, 0x9}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x6f)

19:24:59 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x35, {0x0, 0x3, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x8f)

19:24:59 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x48, {0x0, 0x4, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xa2)

19:24:59 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:59 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x48, {0x0, 0x4, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xa2)

19:24:59 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:59 executing program 7:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1447.481061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.483761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.489360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.495153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.498709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.511259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.513897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.515532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.517927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.519221] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.520458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.524788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.530834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.531579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.535955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:59 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x48, {0x0, 0x4, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xa2)

19:24:59 executing program 7:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1447.939066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.946346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:24:59 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x5c)

19:24:59 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x48, {0x0, 0x4, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xa2)

19:24:59 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x48, {0x0, 0x4, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xa2)

19:24:59 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:24:59 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x35, {0x0, 0x3, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x8f)

19:24:59 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x22, {0x0, 0x2, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x7c)

[ 1447.995001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.007820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.009220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.013405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.017969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.019749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.021296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.026713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.031876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.032156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.035979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.039133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.045218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:00 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:25:00 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:25:00 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x22, {0x0, 0x2, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x7c)

[ 1448.461109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1448.469293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:13 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x5c)

19:25:13 executing program 7:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:25:13 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x22, {0x0, 0x2, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x7c)

19:25:13 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

[ 1461.222175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:13 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x35, {0x0, 0x3, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x8f)

19:25:13 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:25:13 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:25:13 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1461.236184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1461.236672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1461.237995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1461.243949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1461.244458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1461.251408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1461.253993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1461.256746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1461.265284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1461.267112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:13 executing program 3:
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

19:25:13 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

19:25:13 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1461.342200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:13 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x5c)

[ 1461.357016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1461.372014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1461.375917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.706117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:25 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x5c)

19:25:25 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:25:25 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18}, './file0\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

19:25:25 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x5c)

19:25:25 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x5c)

19:25:25 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x5c)

19:25:25 executing program 5:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1473.715822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.717453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.722227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.725287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.727899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:25 executing program 7:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1473.733735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.739472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.743157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.746092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.748767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.750794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.752890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.756140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:26 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x5c)

19:25:26 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:25:26 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x5c)

19:25:26 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:25:26 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x7fff, 0x3}}}}}, 0x5c)

19:25:26 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x5c)

19:25:26 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

[ 1474.103573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1474.106058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1474.131729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1474.133776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1474.137664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1474.144099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1474.150241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:26 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:25:26 executing program 7:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1474.166536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1474.181575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1474.186628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1474.203847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:26 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:25:26 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:25:26 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:25:26 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:25:26 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:25:26 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:25:26 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))

19:25:38 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x5c)

19:25:38 executing program 7:
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:25:38 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

19:25:38 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x0, 0x3}}}}}, 0x5c)

19:25:38 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)

19:25:38 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0x5c)

19:25:38 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x7fff, 0x3}}}}}, 0x5c)

19:25:38 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

[ 1486.347149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1486.349659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1486.351522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1486.355436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1486.355533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1486.358701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:38 executing program 3:
syz_open_dev$usbmon(0x0, 0x0, 0x200080)

[ 1486.372194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1486.377338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1486.386788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1486.390896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1486.397801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:38 executing program 3:
syz_open_dev$usbmon(0x0, 0x0, 0x200080)

19:25:38 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))

19:25:38 executing program 3:
syz_open_dev$usbmon(0x0, 0x0, 0x200080)

19:25:38 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:25:38 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)

19:25:38 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:25:38 executing program 5:
syz_open_dev$usbmon(0x0, 0x0, 0x200080)

19:25:38 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:25:38 executing program 3:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

[ 1486.756075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1486.763947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:52 executing program 5:
syz_open_dev$usbmon(0x0, 0x0, 0x200080)

19:25:52 executing program 6:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:25:52 executing program 7:
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:25:52 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x0, 0x3}}}}}, 0x5c)

19:25:52 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:25:52 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x0, 0x3}}}}}, 0x5c)

19:25:52 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x7fff, 0x3}}}}}, 0x5c)

19:25:52 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

[ 1500.297329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1500.299816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1500.309426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:52 executing program 6:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

[ 1500.331685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1500.336602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1500.342692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1500.356704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1500.356917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:52 executing program 6:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

[ 1500.359758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:25:52 executing program 6:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)

19:26:03 executing program 5:
syz_open_dev$usbmon(0x0, 0x0, 0x200080)

19:26:03 executing program 7:
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)

19:26:03 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

19:26:03 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast}}}}}, 0x5c)

19:26:03 executing program 2:
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:26:03 executing program 6:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)

19:26:03 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x0, 0x3}}}}}, 0x5c)

19:26:03 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x7fff, 0x3}}}}}, 0x5c)

[ 1511.208785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1511.214280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1511.215406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1511.222894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1511.224637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1511.228690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1511.235670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1511.236103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1511.239202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1511.244010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:26:15 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0)

19:26:15 executing program 6:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)

19:26:15 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x0, 0x3}}}}}, 0x5c)

19:26:15 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:26:15 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:26:15 executing program 2:
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:26:15 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x0, 0x3}}}}}, 0x5c)

19:26:15 executing program 7:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)

[ 1523.291728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1523.293967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1523.303126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1523.314314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:26:15 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)

[ 1523.318405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1523.332034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1523.335365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1523.344263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1523.347339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:26:15 executing program 6:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

19:26:15 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

19:26:15 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)

19:26:15 executing program 6:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

19:26:15 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)

19:26:15 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)

[ 1535.425351] Bluetooth: hci0: command 0x0406 tx timeout
19:26:29 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:26:29 executing program 4:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:26:29 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

19:26:29 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:26:29 executing program 5:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:26:29 executing program 6:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

19:26:29 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x0, 0x3}}}}}, 0x5c)

19:26:29 executing program 2:
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1537.310570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:26:29 executing program 3:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

[ 1537.313857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1537.325543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:26:29 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

[ 1537.358774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1537.364954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1537.370757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1537.384591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:26:29 executing program 7:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

19:26:29 executing program 5:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:26:29 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x72c6}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000801)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe9}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6fe4b6c4e3f1f81949013572c95790b"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x9}, @NL80211_ATTR_SSID={0x17, 0x34, @random="5156633836ddffc4a9149ba812ce5ef4f80305"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cadc7d090b37dd261fbeb183b98ec4b7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7d789a5853bda0f4edd8c00dff44e53c"}, @NL80211_ATTR_PMK={0x14, 0xfe, "45defe0e21d21a590feb9bc7cecc97a8"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "97b3120177541daa1b85bf188bd71955"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
mount_setattr(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x8000, &(0x7f0000000540)={0x2, 0x73, 0x120000, {r1}}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000a00), 0x4200, 0x0)

[ 1537.497609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:26:29 executing program 7:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:26:29 executing program 6:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:26:29 executing program 5:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

[ 1537.522659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:26:29 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:26:42 executing program 6:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080), 0x80800)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:26:42 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:26:42 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x0, @device_a, 0x0, @device_b, 0x0, 0x0, @broadcast}}, @val={0x84, 0x2}, @val={0x7e, 0x15, {{}, 0x0, 0x0, @broadcast, 0x0, 0x0, 0x3}}}}}, 0x5c)

[ 1550.259686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1550.291265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1550.297477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1550.301948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1550.303216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:26:42 executing program 2:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:26:42 executing program 5:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x2, 0x7, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x54}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0xae2ac7da9b33948)
pipe2(&(0x7f0000000340), 0x800)

19:26:42 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:26:42 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:26:42 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:26:42 executing program 5:
pipe2(&(0x7f0000000340), 0x800)

19:26:42 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:26:42 executing program 5:
pipe2(0x0, 0x800)

19:26:42 executing program 6:
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:26:42 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:26:42 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:26:42 executing program 6:
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:26:42 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000000)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x164, 0xb, 0x6, 0x102, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10000}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1000}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xad}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x10000}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x20000000}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x9c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1f}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8ddc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xf8}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8010}, 0x20004000)

19:26:55 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)

19:26:55 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:26:55 executing program 6:
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:26:55 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
r0 = syz_open_procfs$userns(0x0, &(0x7f0000001c00))
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ppoll(&(0x7f0000001c40)=[{r0, 0x80}, {r1, 0xe280}], 0x2, &(0x7f0000001c80)={0x77359400}, &(0x7f0000001cc0)={[0x7]}, 0x8)

19:26:55 executing program 5:
pipe2(0x0, 0x800)

19:26:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x4000000)

19:26:55 executing program 2:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:26:55 executing program 7:
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

[ 1563.497478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1563.524054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1563.533961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1563.541594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:26:55 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:26:55 executing program 6:
pipe2(&(0x7f0000000340), 0x800)

19:26:55 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000000)

19:26:55 executing program 5:
pipe2(0x0, 0x800)

19:26:55 executing program 7:
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:26:55 executing program 6:
pipe2(0x0, 0x800)

19:26:55 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:26:55 executing program 7:
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

[ 1577.223841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1577.227240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1577.240391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:09 executing program 6:
pipe2(0x0, 0x800)

19:27:09 executing program 1:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)

19:27:09 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:27:09 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000000)

19:27:09 executing program 5:
pipe2(&(0x7f0000000340), 0x0)

19:27:09 executing program 7:
pipe2(&(0x7f0000000340), 0x800)

19:27:09 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:27:09 executing program 2:
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1577.245042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:09 executing program 6:
pipe2(0x0, 0x800)

19:27:09 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)

19:27:09 executing program 7:
pipe2(0x0, 0x800)

[ 1577.307600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:09 executing program 6:
pipe2(&(0x7f0000000340), 0x0)

19:27:09 executing program 4:
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000000)

19:27:09 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))

19:27:09 executing program 7:
pipe2(0x0, 0x800)

19:27:09 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000000)

19:27:22 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)

19:27:22 executing program 3:
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))

19:27:22 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000000)

19:27:22 executing program 6:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:27:22 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:27:22 executing program 2:
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:27:22 executing program 1:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)

19:27:22 executing program 7:
pipe2(0x0, 0x800)

19:27:22 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1590.775199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1590.781210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1590.791220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:22 executing program 3:
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))

[ 1590.796220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1590.806524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1590.807028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:22 executing program 7:
pipe2(&(0x7f0000000340), 0x0)

[ 1590.819217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:22 executing program 7:
pipe2(0x0, 0x800)

19:27:22 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000000)

19:27:22 executing program 3:
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))

19:27:22 executing program 7:
pipe2(0x0, 0x800)

[ 1601.526838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1601.534303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1601.535021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:33 executing program 1:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)

19:27:33 executing program 3:
socketpair(0x0, 0xa, 0x0, &(0x7f0000000280))

19:27:33 executing program 5:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)

19:27:33 executing program 2:
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)

19:27:33 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:27:33 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x0)

19:27:33 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:27:33 executing program 6:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1601.539822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1601.542080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1601.547367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1601.548291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:33 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:27:33 executing program 4:
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)

19:27:33 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

19:27:33 executing program 3:
socketpair(0x38, 0x0, 0x0, &(0x7f0000000280))

[ 1601.619864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:33 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:27:33 executing program 3:
socketpair(0x38, 0x0, 0x0, 0x0)

19:27:33 executing program 7:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:27:33 executing program 3:
socketpair(0x38, 0x0, 0x0, 0x0)

[ 1613.028521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:45 executing program 4:
syz_80211_inject_frame(0x0, 0x0, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)

19:27:45 executing program 2:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:27:45 executing program 7:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:27:45 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:27:45 executing program 3:
socketpair(0x38, 0x0, 0x0, 0x0)

19:27:45 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)

[ 1613.039746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:45 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1613.042724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:45 executing program 6:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

[ 1613.047363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1613.076912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:45 executing program 6:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:27:45 executing program 7:
syz_open_procfs$userns(0x0, 0x0)

[ 1613.095673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:45 executing program 7:
syz_open_procfs$userns(0x0, 0x0)

19:27:45 executing program 3:
syz_open_procfs$userns(0x0, 0x0)

19:27:45 executing program 7:
syz_open_procfs$userns(0x0, 0x0)

19:27:45 executing program 5:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:27:45 executing program 6:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
socketpair(0x38, 0xa, 0x0, &(0x7f0000000280))
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:27:45 executing program 5:
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:27:56 executing program 6:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:27:56 executing program 4:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:27:56 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)

19:27:56 executing program 3:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000), 0x4000)
socket(0x27, 0xa, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:27:56 executing program 5:
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

19:27:56 executing program 7:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000), 0x4000)
socket(0x27, 0xa, 0x5)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:27:56 executing program 2:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:27:56 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1624.799709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1624.806476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:56 executing program 5:
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r0)

[ 1624.827780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1624.835119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1624.840851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:27:56 executing program 5:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:27:56 executing program 6:
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:27:56 executing program 2:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:27:56 executing program 5:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:27:56 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:27:56 executing program 7:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:27:57 executing program 6:
syz_open_procfs$userns(0x0, 0x0)

19:27:57 executing program 5:
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:28:09 executing program 7:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:28:09 executing program 4:
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x4000)
r2 = socket(0x27, 0xa, 0x5)
ppoll(&(0x7f0000000040)=[{r0, 0x4341}, {r1, 0x10}, {r2, 0x2400}], 0x3, &(0x7f0000000080), &(0x7f00000000c0)={[0x2]}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ppoll(&(0x7f0000000940)=[{0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x202}], 0x2, &(0x7f0000000980), &(0x7f00000009c0)={[0x4]}, 0x8)

19:28:09 executing program 0:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast, {0x1}}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x0, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

19:28:09 executing program 2:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:28:09 executing program 5:
pipe2(0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:28:09 executing program 3:
syz_open_dev$usbmon(0x0, 0x3b69, 0x200080)
syz_open_procfs$userns(0x0, &(0x7f0000001c00))

19:28:09 executing program 6:
syz_open_procfs$userns(0x0, 0x0)

19:28:09 executing program 1:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@ack={{}, {}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_a, @from_mac=@broadcast}, @mesh_hwmp_psel={0xd, 0x1, {@void, @val={0x83, 0x25, @ext={{}, 0x6, 0x5, @device_a, 0x7f, @device_b, 0xfff, 0xff000000, @broadcast, 0x8001}}, @val={0x84, 0x68, {0x20, 0x6, [@ext={{}, @device_a, 0x4, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x1e}, @ext={{}, @broadcast, 0xfff, @device_a, 0x17}, @ext={{}, @broadcast, 0x8, @device_a, 0x34}, @not_ext={{}, @broadcast, 0x0, "", 0x2b}, @ext={{}, @device_a, 0x3ff, @broadcast}]}}, @val={0x7e, 0x15, {{}, 0x81, 0x31, @broadcast, 0x5, 0x7fff, 0x3}}}}}, 0xc2)

[ 1637.990178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1638.020848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:28:10 executing program 6:
syz_open_procfs$userns(0x0, 0x0)

[ 1638.034311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1638.087543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
19:28:10 executing program 5:
pipe2(0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:28:10 executing program 3:
syz_open_procfs$userns(0x0, 0x0)

19:28:10 executing program 5:
pipe2(0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:28:10 executing program 3:
pipe2(0x0, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)

19:28:10 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

19:28:10 executing program 2:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

19:28:10 executing program 7:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000009, 0x1010, r0, 0x7)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x80800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_NAT_DST={0x48, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4090}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0)

19:28:10 executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xa366}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4048014}, 0x4004)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x308, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x33}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={0x0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x140, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)='gretap0\x00', 0x2c, 0xf8f, 0x1})
syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)

[ 1640.782707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1640.787336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1640.789015] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1640.793619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1640.795935] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1640.797930] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1642.817331] Bluetooth: hci0: command 0x0409 tx timeout
[ 1644.865333] Bluetooth: hci0: command 0x041b tx timeout
[ 1646.913397] Bluetooth: hci0: command 0x040f tx timeout
[ 1648.961341] Bluetooth: hci0: command 0x0419 tx timeout
[ 1649.532552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1649.534506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1649.537962] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1649.586633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1649.588443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1649.593989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1649.762686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1649.784513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1652.050633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1652.053985] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1652.056029] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1652.062218] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1652.065989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1652.067906] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1654.081320] Bluetooth: hci0: command 0x0409 tx timeout
[ 1656.129343] Bluetooth: hci0: command 0x041b tx timeout
[ 1658.177304] Bluetooth: hci0: command 0x040f tx timeout
[ 1660.225349] Bluetooth: hci0: command 0x0419 tx timeout
[ 1660.447654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1660.449282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1660.451891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1660.504338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1660.505939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1660.508504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1660.683634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1660.709663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1662.993163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1662.995430] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1662.998893] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1663.002680] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1663.007804] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1663.009703] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1665.026293] Bluetooth: hci0: command 0x0409 tx timeout
[ 1667.073779] Bluetooth: hci0: command 0x041b tx timeout
[ 1669.121310] Bluetooth: hci0: command 0x040f tx timeout
[ 1671.170293] Bluetooth: hci0: command 0x0419 tx timeout
[ 1671.317487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1671.319096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1671.321806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1671.363653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1671.365487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1671.367926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1671.544343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1671.565932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1675.905444] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 1678.099864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1678.105352] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1678.108760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1678.113719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1678.115667] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1678.117349] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1680.129332] Bluetooth: hci0: command 0x0409 tx timeout
[ 1682.177332] Bluetooth: hci0: command 0x041b tx timeout
[ 1684.226319] Bluetooth: hci0: command 0x040f tx timeout
[ 1686.273480] Bluetooth: hci0: command 0x0419 tx timeout
[ 1686.807815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1686.809870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1686.826195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1686.842789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1686.844701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1686.848189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1687.052533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1689.371007] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1689.373668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1689.376518] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1689.381742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1689.383971] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1689.385977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1691.457468] Bluetooth: hci0: command 0x0409 tx timeout
[ 1693.505374] Bluetooth: hci0: command 0x041b tx timeout
[ 1695.553292] Bluetooth: hci0: command 0x040f tx timeout
[ 1697.279877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1697.281722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1697.284213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1697.352071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1697.353934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1697.356759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1697.526428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1697.549982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1697.601279] Bluetooth: hci0: command 0x0419 tx timeout
[ 1697.652143] syz-executor.1 (12275) used greatest stack depth: 23656 bytes left
[ 1699.848166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1699.855560] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1699.858465] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1699.863612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1699.865836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1699.867643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1701.889290] Bluetooth: hci0: command 0x0409 tx timeout
[ 1703.937320] Bluetooth: hci0: command 0x041b tx timeout
[ 1705.985325] Bluetooth: hci0: command 0x040f tx timeout
[ 1708.034301] Bluetooth: hci0: command 0x0419 tx timeout
[ 1708.206142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1708.207803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1708.210624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1708.285726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1708.287936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1708.290589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1708.466877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1708.495034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1712.897311] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 1717.121397] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 1719.313049] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1719.316786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1719.323350] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1719.334192] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1719.337883] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1719.339673] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1721.409287] Bluetooth: hci0: command 0x0409 tx timeout
[ 1723.457377] Bluetooth: hci0: command 0x041b tx timeout
[ 1725.505302] Bluetooth: hci0: command 0x040f tx timeout
[ 1727.385009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1727.386828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1727.389805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1727.448699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1727.450688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1727.453568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1727.553299] Bluetooth: hci0: command 0x0419 tx timeout
[ 1727.645167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1727.671431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1730.002675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1730.004928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1730.007594] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1730.011376] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1730.013195] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1730.015947] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1732.034305] Bluetooth: hci0: command 0x0409 tx timeout
[ 1734.081288] Bluetooth: hci0: command 0x041b tx timeout
[ 1736.129319] Bluetooth: hci0: command 0x040f tx timeout
[ 1738.177271] Bluetooth: hci0: command 0x0419 tx timeout
[ 1738.466531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1738.468480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1738.471694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1738.531750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1738.533717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1738.537047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1738.709064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1738.732446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
2021/12/24 19:29:50 executor 1 failed 11 times:
executor 1: exit status 67
SYZFAIL: netlink_send_ext: bad netlink ack type
type=29 (errno 22: Invalid argument)
SYZFAIL: child failed
 (errno 0: Success)
loop exited with status 67

VM DIAGNOSIS:
19:29:51  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff858c048c RCX=ffffffff813101c3 RDX=fffffbfff0b17e93
RSI=0000000000000008 RDI=0000000000000009 RBP=0000000000000000 RSP=ffff88806ce09c28
R8 =0000000000000000 R9 =ffffffff858bf497 R10=fffffbfff0b17e92 R11=0000000000000001
R12=ffffffff8520bcc0 R13=ffffffff858bf560 R14=0000000000000000 R15=ffff88806ce38800
RIP=ffffffff81167f51 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe39139ffb8 CR3=000000001b31a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 636578650a3a7365 6d69742031312064
YMM02=0000000000000000 0000000000000000 6174732074697865 203a3120726f7475
YMM03=0000000000000000 0000000000000000 203a4c4941465a59 530a373620737574
YMM04=0000000000000000 0000000000000000 7478655f646e6573 5f6b6e696c74656e
YMM05=0000000000000000 0000000000000000 6361206b6e696c74 656e20646162203a
YMM06=0000000000000000 0000000000000000 282039323d657079 740a65707974206b
YMM07=0000000000000000 0000000000000000 696c61766e49203a 3232206f6e727265
YMM08=0000000000000000 0000000000000000 6b6361206b6e696c 74656e2064616220
YMM09=0000000000000000 0000000000000000 65282039323d6570 79740a6570797420
YMM10=0000000000000000 0000000000000000 64696c61766e4920 3a3232206f6e7272
YMM11=0000000000000000 0000000000000000 41465a59530a2974 6e656d7567726120
YMM12=0000000000000000 0000000000000000 64656c6961662064 6c696863203a4c49
YMM13=0000000000000000 0000000000000000 63637553203a3020 6f6e72726528200a
YMM14=0000000000000000 0000000000000000 6465746978652070 6f6f6c0a29737365
YMM15=0000000000000000 0000000000000000 0a37362073757461 7473206874697720
info registers vcpu 1
RAX=0000000080010001 RBX=0000000000000004 RCX=0000000000000000 RDX=ffff88800f90d040
RSI=ffffffff8133a242 RDI=0000000000000003 RBP=ffff88800ed45000 RSP=ffff88806cf09e20
R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff8133a239 R11=0000000000000000
R12=ffff88806cf2a700 R13=ffff88806cf2a800 R14=dffffc0000000000 R15=7fffffffffffffff
RIP=ffffffff81431f0c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fb0b6fce8c0 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f65e1f7ce88 CR3=000000000c8a4000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 2525252525252525 2525252525252525
YMM01=0000000000000000 0000000000000000 00000000000000ff 0000000000ff0000
YMM02=0000000000000000 0000000000000000 00000000000000ff 0000000000ff0000
YMM03=0000000000000000 0000000000000000 00007fb0b8f82d30 00007fb0b8f83ba0
YMM04=0000000000000000 0000000000000000 00000003ffffffff 00007fb0b8f82d30
YMM05=0000000000000000 0000000000000000 00007fb0b8f88260 00007fb0b8f67af0
YMM06=0000000000000000 0000000000000000 00007fb0b8f600e0 0000000000000000
YMM07=0000000000000000 0000000000000000 ffffffff00000002 00007fb0b8f2dcd0
YMM08=0000000000000000 0000000000000000 732f636f72702f00 6b63616d7300632e
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000200000 0000000000200000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000